Problems with Kerberos and delegation account

Hi out there I still have a problem with the Kerberes SSO.

I am getting a ticket so I think most of my setup Works but I have missed something - please try to take a look here - all of you which has got this Kerbeors SSO working - haven't you also seen this error: Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: ctx: 0x9b76e18, SERVER: TMEVT_REQUEST

Dec 20 13:17:17 bigip1 info websso.0[7697]: 014d0011:6: 89605cf9: Websso Kerberos authentication for user 'ti' using config '/Common/ADPKerbSSO'

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0018:7: sid:89605cf9 ctx:0x9b33498 server address = ::ffff:192.168.12.20

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0046:7: 89605cf9: adding item to WorkQueue

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0021:7: sid:89605cf9 ctx:0x9b33498 SPN = HTTP/win2k8web1.testdom.dk@TESTDOM.DK

Dec 20 13:17:17 bigip1 info websso.0[7697]: 014d0022:6: 89605cf9: Kerberos: realm for user ti is not set, using server's realm TESTDOM.DK

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0023:7: S4U ======> ctx: 89605cf9, sid: 0x9b33498, user: ti@TESTDOM.DK, SPN: HTTP/win2k8web1.testdom.dk@TESTDOM.DK

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: Getting UCC:ti@TESTDOM.DK@TESTDOM.DK, lifetime:36000

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: Found UCC:ti@TESTDOM.DK@TESTDOM.DK, lifetime:36000 left:35540

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: UCCmap.size = 1, UCClist.size = 1

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: S4U ======> - NO cached S4U2Proxy ticket for user: ti@TESTDOM.DK server: HTTP/win2k8web1.testdom.dk@TESTDOM.DK - trying to fetch

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: S4U ======> trying to fetch S4U2Proxy ticket for user: ti@TESTDOM.DK server: HTTP/win2k8web1.testdom.dk@TESTDOM.DK

Dec 20 13:17:17 bigip1 err websso.0[7697]: 014d0005:3: Kerberos: can't get S4U2Proxy ticket for server HTTP/win2k8web1.testdom.dk@TESTDOM.DK - Requesting ticket can't get forwardable tickets (-1765328163)

Dec 20 13:17:17 bigip1 err websso.0[7697]: 014d0024:3: 89605cf9: Kerberos: Failed to get ticket for user ti@TESTDOM.DK

Dec 20 13:17:17 bigip1 err websso.0[7697]: 014d0048:3: 89605cf9: failure occurred when processing the work item

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: ctx: 0x9b76e18, SERVER: TMEVT_NOTIFY

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: ctx: 0x9b76e18, SERVER: TMEVT_RESPONSE

if this S4U2Proxy functionality doesn't Work - what have I forgotten - probably something on the webserver but what? best regards /thomas iwang