Hi, I recently started using the client keytab feature MIT Kerberos introduced some time ago. While C based programs work fine with KRB5_CLIENT_KTNAME, Java is unable to read the credential cache created by that client keytab initiation code because some addtional marker principals are added.
In order to analyze the issue, I can provide logfiles, etc. Michael