Windows 2000 does not have the correct expectations when sending a referral to a non-Windows 2000 Kerberos realm. This causes the Key Distribution Center (KDC) to generate an improper referral. When a Kerberos realm is added to the realm list, it may not be updated until the client is rebooted. This problem can occur when interfacing with third-party Kerberos implementations. Microsoft has released a patch to correct this issue.