Markus,
Thank you (again) for your help.
I hadn't realised that the principal name in question was the userPrincipalName
attribute in AD - I was confusing it with the servicePrincipalName attribute.
Of course that now makes sense. In fact, the method I followed to add the
userPrincipalName
Nick,
The problem here is how the keytab entry was created. To authenticate
against AD the userprincipalname attribute must be set to the same as the
principla you want to authenticate. For a user it user the username e.g.
us...@domain will have a userprinciplanme of us...@domain.
