Kerbtray realm and kdc for java gss-api

I'm using kerbtray.exe on Win7.

How do I know exactly what the realm and 开发者_运维问答kdc is for a java gss-api login?

You are probably referring to the krb5.ini maintenance, right? You should start with the realm your process is logged in to. If you plan to do cross-realm, you have to add every realm which you want to authenticate to and eventually your root realm. If you are unsure, you can look it up with DNS:

$host -t SRV _kerberos._tcp.<you realm>

and

$host -t SRV _kerberos._udp.<you realm>

See here for reference.