Forum Discussion
Steve_Janetzke_
Nimbostratus
We were able to figure it out. We had to add the "host/apmkerb.svc" as an SPN for apmkerb.svc even though it got a TGT for host/apmkerb.svc@TEST.DOMAIN.COM when it tried to fetch the S4U ticket it first sent a TGS to the domain with that Sname. A packet capture on the DC revealed it and it is now fetching the S4U ticket correctly.
Dec 15, 2016
Does the user davis exists in your kerberos database?? (Kerberos needs the sAMAccountName.
Cheers,
Kees