Forum Discussion
Kevin_Stewart
Mar 07, 2014Employee
If this is for a Microsoft product, you'll likely want to keep authorization set to Always. So where does it fail? The S4U -> OK would suggests that APM is successfully retrieving a ticket, so is it possible that the app is rejecting it? WireShark will show you which Kerberos message is failing.