Bill, When you get this error: "kinit(v5): Client not found in Kerberos database while getting initial credentials". for your SPN, your KDC is trying to tell you that it couldnt find your SPN in the Kerberos Database, in this case AD. That tells me that there is something wrong with the AD user/SPN mapping. Unfortunately, it doesn't tell me EXACTLY whats wrong.
You arent attempting to go across domains when running this are you? -- View this message in context: http://jasig.275507.n4.nabble.com/Problem-with-SPNEGO-Getting-NTLM-token-instead-of-Kerberos-tp1598650p2076017.html Sent from the CAS Users mailing list archive at Nabble.com. -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user