Hi Aleksey,
in your last email you wrote that everything works (at least that's my understanding, email pasted below). So what exactly doesn't work for you?
Regards
Martin Perina
> # kinit aleksey
>
> Password for
aleksey@AD.HOLDING.COM: ***
>
> # klist
>
> Ticket cache: KEYRING:persistent:0:krb_ccache_9W86VN9
> Default principal:
aleksey@AD.HOLDING.COM>
> Valid starting Expires Service principal
> 09/30/2016 16:50:32 10/01/2016 02:50:32 krbtgt/
AD.HOLDING.COM@AD.HOLDING.COM> renew until
10/07/2016 16:50:29>
>
> # curl --negotiate -u : -X GET -H "Accept: application/xml" -k
https://kom-ad01-ovirt1.ad.holding.com/ovirt-engine/api>
> <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
> <api>
> ... output truncated ...
> </api>
>
> It Works.
> The browsers are configured.
> Kerberos authentication for Windows web servers working successfully from Internet Explorer & Forefox