Hello,
unfortunately the trace is too short and does not contain the Kerberos request.
I want to see if the client gets a Kerberos ticket or not for the given Service.
Could you please make a developer trace (Developer trace level) of one enroll and attach that file here?
Also a troubleshooting wizard trace from the server side (as best also from one enroll) can show, if the AS Java and the Domain Controller is correctly configured.
thanks.
best regards
Alexander Gimbel