Hi, ahh. So this is about SPNEGO on AS JAVA configuration. OK. So Yüksel is perfectly right in this case.
I would additionaly recommend to set both AES encryption flags on the AD account. Otherwise Kerberos/SPNego will work with deprecated RC4.
Regards,
Lutz