Hi Valerie,
Thanks for the reply. Yes I have checked that the SPN is unique and it is set to the FQDN of the ABAP server. We only have 1 domain at the client and not multiple domains. In SPNEGO the keytab is configured for the domain with the service user and SPNEGO also picks up the SPNs correctly and the SPN uniqueness check and Token check in SPNEGO also works.
I also checked the klist output and it has a whole list of Kerberos ticket outputs for various encryption types for my user including for e.g. AES-256-CTS-HMAC-SHA1-96 which is one of the algorithms in SPNEGO.
So I don't know what else to check...
