Problems with Kerberos and delegation account

well - more or less - depends on how we look at it - the windows domain is still the same and the webserver is also still member of that domain but if we have a website with a different domain (eg realm) - hosted on that webserver - do you have any idea of which impact this has on it? Should I just define a different SPN value in the SSO config (and this also then needs som maintaince of the keytab file) User and resource fores is still the same - the users are members of the windows domain etc - but the site they access could be named some different domain extension best regards /ti