windows gss-api

[Rick]

On the Windows KDC (in AD) I created the following -users- with the same
passwords:

user1
asample  <- service principal
win_nt4   <- client machine hostname

I also created a computer account and DNS entry for win_nt4 in AD.

then

ktpass -princ asample/win_nt4.kerberos.com at KERBEROS.COM -mapuser user1 -pass
pass1 -out krb5.keytab

I copied the krb5.keytab to the client.

On client (using MIT Kerberos):
kinit user1

gss-server asample
GSS-API error acquiring credentials: Miscellaneous failure
GSS-API error acquiring credentials: No principal in keytab matches desired
name

When I try a very similar test (different principals/users) on a Solaris
host it works fine.

I don't understand why it can't find 'asample'.

What's wrong with this?????  It's driving me nuts.

Thanks