Can you try turning off delegated credentials? GSSAPIDelegateCreds no in your client config? This is a shot in the dark, but I don't think I've ever seen a problem with the authenticator path once the ticket is decrypted. There is a first for everything, but the delegation path is more fragile.
--Sam -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

