<p>SRV IS OK.<br>
but why KDC error?</p>
<div class="gmail_quote">在 2013-5-4 下午4:31,&quot;Kevein Liu&quot; &lt;<a href="mailto:liuyang3240@gmail.com">liuyang3240@gmail.com</a>&gt;写道:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="auto"><div>Try nslookup -type=SRV _ldap.....</div><div><br></div><div>I forget the exact command<br><br>Sent from my iPhone</div><div><br>在 2013-5-4,15:07,李强 &lt;<a href="mailto:liqiang.net@gmail.com" target="_blank">liqiang.net@gmail.com</a>&gt; 写道:<br>
<br></div><blockquote type="cite"><div><div dir="ltr"><div class="gmail_extra"><div class="gmail_extra">[root@localhost ~]# host -t SRV _ldap._<a href="http://tcp.startn.com" target="_blank">tcp.startn.com</a></div><div class="gmail_extra">
_ldap._<a href="http://tcp.startn.com" target="_blank">tcp.startn.com</a> has SRV record 10 0 389 <a href="http://authen.startn.com" target="_blank">authen.startn.com</a>.</div>

<div class="gmail_extra">[root@localhost ~]# dig <a href="http://authen.startn.com" target="_blank">authen.startn.com</a></div><div class="gmail_extra"><br></div><div class="gmail_extra">; &lt;&lt;&gt;&gt; DiG 9.9.2-rl.028.23-P2-RedHat-9.9.2-10.P2.fc18 &lt;&lt;&gt;&gt; <a href="http://authen.startn.com" target="_blank">authen.startn.com</a></div>


<div class="gmail_extra">;; global options: +cmd</div><div class="gmail_extra">;; Got answer:</div><div class="gmail_extra">;; -&gt;&gt;HEADER&lt;&lt;- opcode: QUERY, status: NOERROR, id: 39385</div><div class="gmail_extra">


;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2</div><div class="gmail_extra"><br></div><div class="gmail_extra">;; OPT PSEUDOSECTION:</div><div class="gmail_extra">; EDNS: version: 0, flags:; udp: 4096</div>


<div class="gmail_extra">;; QUESTION SECTION:</div><div class="gmail_extra">;<a href="http://authen.startn.com" target="_blank">authen.startn.com</a>. &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; IN &nbsp; &nbsp; &nbsp;A</div><div class="gmail_extra"><br></div><div class="gmail_extra">


;; ANSWER SECTION:</div><div class="gmail_extra"><a href="http://authen.startn.com" target="_blank">authen.startn.com</a>. &nbsp; &nbsp; &nbsp;86400 &nbsp; IN &nbsp; &nbsp; &nbsp;A &nbsp; &nbsp; &nbsp; 10.0.10.182</div><div class="gmail_extra"><br></div><div class="gmail_extra">
;; AUTHORITY SECTION:</div>

<div class="gmail_extra"><a href="http://startn.com" target="_blank">startn.com</a>. &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 86400 &nbsp; IN &nbsp; &nbsp; &nbsp;NS &nbsp; &nbsp; &nbsp;<a href="http://engine.startn.com" target="_blank">engine.startn.com</a>.</div><div class="gmail_extra">
<br></div><div class="gmail_extra">

;; ADDITIONAL SECTION:</div><div class="gmail_extra"><a href="http://engine.startn.com" target="_blank">engine.startn.com</a>. &nbsp; &nbsp; &nbsp;86400 &nbsp; IN &nbsp; &nbsp; &nbsp;A &nbsp; &nbsp; &nbsp; 10.0.10.181</div></div><div class="gmail_extra"><br><div class="gmail_quote">
2013/5/4 Kevein Liu <span dir="ltr">&lt;<a href="mailto:liuyang3240@gmail.com" target="_blank">liuyang3240@gmail.com</a>&gt;</span><br>

<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> you have SRV record in your DNS server?</blockquote></div>


<br><br>
</div></div>
</div></blockquote></div></blockquote></div>