Thanks for your fast reply.
I did'nt know that I must not use the root domain under the domain realms. Thanks for
the hint and the reference.
We configured the trust again, now with all relevant subdomains and SSO is now working.
I noticed only one thing after login: It seems that the GSSAPI Credential Delegation is
still not working.
I would assume to have a valid ticket from the
example.int domain after login. As for now
I have to manually do a kinit and it prompts me for the AD user password. After that I
have a valid ticket.
Is this problem still related to some suffix routing problem or is this a new separat
issue?
Thanks,
Hannes