If you have a look at the Beta2 release of JBoss Negotiation: - http://www.jboss.com/index.html?module=bb&op=viewtopic&t=139944 This has now been documented against FreeIPA, FreeIPA is essentially a distribution that simplifies the installation of an MIT KDC backed by LDAP. Although not documented yet provided you set up the service principals correctly you should be able to run against a standard MIT KDC. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4173971#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...