Due to frustration on people updating Kerberos config data without actually, well, being correct, I’ve added a helper to vict.jar: “Created a quick tool to dump out Kerberos config information in text and XML format to help reduce ambiguity in documented AD authentication via Kerberos”.

I hope this avoids further misguided dependence on Jambons who just cannot check a detail.

Try it out on your server:

java -jar vict.jar --kerberos

There’s an article (How to Enable Active Directory Authentication via Kerberos) describing the process of adding a Kerberos user, but this output accelerates the process.