Hey Duy,
Consider tracing the process using report SEC_TRACE_ANALYZER or
you can get there inside SPNEGO tocode at "goto - spnego tracing"
Also, if you follow note 1848999 you can create a ini file called sectrace.ini at the OS level so you can view traces that SAP is going to want anyway.
NICK