On Jun 18, 2008, at 3:36 PM, Jeffrey Altman via RT wrote:

[...]

> If there are multiple processes or threads on the same
> machine each requesting service tickets using the same
> client principal for the same service principal where

This multiple process thing is a more tricky design issue.  Apparently  
multiple processes on the same box can get the same time  
(microseconds) and so the authenticator is not unique.  I see this  
from time to time.  The SMP OS or the hardware could put a lock around  
returning the time to ensure it's unique but evidently that is not  
done...  I don't think there is much K5 can do about this since the  
threads can't communicate with each other.  Possibly some /dev/random  
could be used instead of the time.  My hack was to have the app retry  
whenever this error is seen.

-nik