title: Kerberos delegation between different services
body: <p>We have the following setup with httpd webservers as shown below:</p>
  
  <p><a href="https://i.stack.imgur.com/dpar9.jpg" rel="noreferrer"><img src="https://i.stack.imgur.com/dpar9.jpg" alt="enter image description here"></a></p>
  
  <p>Heres the scenario:
  <strong>Server A</strong> takes the request from Browser does some operations and creates a new request and sends it to <strong>Server B</strong>.  <strong>User X</strong> is authenticated on <strong>Server B</strong>, but <strong>User Y</strong> is not (and it is not supposed to).  Since A is creating a new request, B is thinking that Y has sent the request and so denying it.  Removing Server A is not an option.  How do I solve this.  Can you please help?</p>