Director on separate Server cannot retrieve data from Controller.
In CDF traces or wiresharks you will see HTTP 400 Bad request.
http://www.iis.net/learn/troubleshoot/diagnosing-http-errors/troubleshooting-http-400-errors-in-iis
https://support.microsoft.com/en-us/kb/2020943
Download : Kerberos Ticket Utility http://www.microsoft.com/en-us/download/details.aspx?DisplayLang=en&id=1448
Run tokensz.exe /compute_tokensize /user:xxaffecteduseraccountxx /domain:domainname.full /password:accountpassword
Verify the max user token is in the range of the MaxTokenSize for the server
If it is over increase token in HKLM\system\currentcontrolset\control\Lsa\Kerberos\Parameters MaxTokenSize Reg_Dword Decimal 48000
Value name: MaxTokenSize
Data type: REG_DWORD
Radix: Decimal
Value data: 48000
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTP\Parameters
Name: MaxFieldLength
Value Type: DWORD
Value Data: 65534
Name: MaxRequestBytes
Value Type: DWORD
Value Data: 16777216