On Fri, 11 Mar 2011, David Brian Chait wrote: >> I looked in AD configuration and see that my server does not have appropriate ServicePrincipalName for HTTP (only host). > > Of course it doesn't, you gathered that ticket by joining the domain with > Samba, but are not using samba auth with apache... No, he's using mod_auth_kerb. What's wrong with that? What is this 'samba auth' you speak of that lets you do passwordless Negotiate based auth? jh