domain join stuck at krb5_get_init_creds_password

[Jeremy Allison]

On Thu, Apr 29, 2021 at 05:55:33AM +0530, Shilpa K via samba-technical wrote:
>Hello,
>
>In one of the cases, we had a situation where KDC was not reachable during
>domain join. In this case, we found that  krb5_get_init_creds_password()
>will be stuck for about 6minutes. Is there a way I can reduce the timeout
>value for  krb5_get_init_creds_password() so that domain join will not be
>waiting on this call for too long?

Where in krb5_get_init_creds_password() is it stuck ?

Is it the DNS resolution, or in the connect() call ?

Can you give more data on what you see in this situation
in wireshark please, and what Samba binary is calling
krb5_get_init_creds_password(). That will help a lot
in debugging this.