This article describes how to fix the registration issue caused by the Kerberos failure “RESPONSE_TOO_BIG.”
 

---

Instructions

When you install your Active Directory (AD) domain controller and Linux VDA virtual machines on Azure, a registration issue might occur. An error message similar to the following appears: If you capture network packages on your AD domain controller, the Kerberos failure “RESPONSE_TOO_BIG” is caught. Usually, the Kerberos authentication uses UDP by default, but Kerberos can use TCP instead if the packages are too big for the UDP payload. One way to fix the registration issue is to change the Kerberos settings on the Linux VDA and force the Linux VDA virtual machines to use TCP for authentication.

Modify the /etc/krb5.conf file on your Linux VDA virtual machines by adding the following line to the [libdefaults] section: Restart the ctxvda service.