Hi Aleksey,

in your last email you wrote that everything works (at least that's my understanding, email pasted below). So what exactly doesn't work for you?

Regards

Martin Perina


> # kinit aleksey
>
> Password for aleksey@AD.HOLDING.COM: ***
>
> # klist
>
> Ticket cache: KEYRING:persistent:0:krb_ccache_9W86VN9
> Default principal: aleksey@AD.HOLDING.COM
>
> Valid starting       Expires              Service principal
> 09/30/2016 16:50:32  10/01/2016 02:50:32  krbtgt/AD.HOLDING.COM@AD.HOLDING.COM
>         renew until 10/07/2016 16:50:29
>
>
> # curl --negotiate -u : -X GET -H "Accept: application/xml" -k https://kom-ad01-ovirt1.ad.holding.com/ovirt-engine/api
>
> <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
> <api>
>  ... output truncated ...
> </api>
>
> It Works.
> The browsers are configured.
> Kerberos authentication for Windows web servers working successfully from Internet Explorer & Forefox