Problems with Kerberos and delegation account

Hi out there I still have a problem with the Kerberes SSO.

I am getting a ticket so I think most of my setup Works but I have missed something - please try to take a look here - all of you which has got this Kerbeors SSO working - haven't you also seen this error: Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: ctx: 0x9b76e18, SERVER: TMEVT_REQUEST

Dec 20 13:17:17 bigip1 info websso.0[7697]: 014d0011:6: 89605cf9: Websso Kerberos authentication for user 'ti' using config '/Common/ADPKerbSSO'

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0018:7: sid:89605cf9 ctx:0x9b33498 server address = ::ffff:192.168.12.20

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0046:7: 89605cf9: adding item to WorkQueue

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0021:7: sid:89605cf9 ctx:0x9b33498 SPN = HTTP/[email protected]

Dec 20 13:17:17 bigip1 info websso.0[7697]: 014d0022:6: 89605cf9: Kerberos: realm for user ti is not set, using server's realm TESTDOM.DK

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0023:7: S4U ======> ctx: 89605cf9, sid: 0x9b33498, user: [email protected], SPN: HTTP/[email protected]

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: Getting UCC:[email protected]@TESTDOM.DK, lifetime:36000

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: Found UCC:[email protected]@TESTDOM.DK, lifetime:36000 left:35540

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: UCCmap.size = 1, UCClist.size = 1

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: S4U ======> - NO cached S4U2Proxy ticket for user: [email protected] server: HTTP/[email protected] - trying to fetch

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: S4U ======> trying to fetch S4U2Proxy ticket for user: [email protected] server: HTTP/[email protected]

Dec 20 13:17:17 bigip1 err websso.0[7697]: 014d0005:3: Kerberos: can't get S4U2Proxy ticket for server HTTP/[email protected] - Requesting ticket can't get forwardable tickets (-1765328163)

Dec 20 13:17:17 bigip1 err websso.0[7697]: 014d0024:3: 89605cf9: Kerberos: Failed to get ticket for user [email protected]

Dec 20 13:17:17 bigip1 err websso.0[7697]: 014d0048:3: 89605cf9: failure occurred when processing the work item

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: ctx: 0x9b76e18, SERVER: TMEVT_NOTIFY

Dec 20 13:17:17 bigip1 debug websso.0[7697]: 014d0001:7: ctx: 0x9b76e18, SERVER: TMEVT_RESPONSE

if this S4U2Proxy functionality doesn't Work - what have I forgotten - probably something on the webserver but what? best regards /thomas iwang