On Fri, 11 Mar 2011, David Brian Chait wrote:
I looked in AD configuration and see that my server does not have appropriate ServicePrincipalName for HTTP (only host).
Of course it doesn't, you gathered that ticket by joining the domain with Samba, but are not using samba auth with apache...
No, he's using mod_auth_kerb. What's wrong with that? What is this 'samba auth' you speak of that lets you do passwordless Negotiate based auth?
jh