title: Issue while configuring Kerberos on Websphere Application Server
body: <p>Team,
  I have a question on Single Sign On using Kerberos Authentication. </p>
  
  <p>We have generated a keytab file for the domain like "POC.MAIL.COM" and our server is hosted on "SW.MAIL.COM". As our application runs on Websphere Application Server, we tried to set the Kerberos configuration as given in the document (page no:167)<a href="http://www.redbooks.ibm.com/redbooks/pdfs/sg247771.pdf" rel="nofollow">http://www.redbooks.ibm.com/redbooks/pdfs/sg247771.pdf</a> . 
   We are facing the an error saying that "<strong>Cannot get credential for principal service HTTP/server1.SW.MAIL.COM@SW.MAIL.COM</strong>". Can someone help me in resolving the issue..?</p>
  
  <p>Please post a comment if any additional information is required..</p>
  
  <p>When I try to set the krb5.conf and keytab file on "Kerberos Authentication Mechanism page", we are getting this error.</p>
  
  <p>When I ran the command klist as per your input, I got the output as below </p>
  
  <p>"Key table: /etc/krb5/pocsso.keytab</p>
  
  <p>Number of entries: 1</p>
  
  <p>[1.] principal: HTTP/server1.sw.mail.com@POC.MAIL.COM
          KVNO: 12
  "</p>
  
  <p><strong>UPDATE</strong>
  . </p>
  
  <p>Ticket cache: FILE:/tmp/krb5cc_38698
  Default principal: pocsso1@POC.MAIL.COM
  Valid starting               Expires               Service principal
  01/09/2014 16:15  02/09/2014 02:21  krbtgt/POC.MAIL.COM@POC.MAIL.COM
          renew until 08/09/2014 16:15</p>