apache virtual hosts and keytabs

[Nikolay Shopik]

On 30.09.2010 1:23, Russ Allbery wrote:
> In practice, you need to add HTTP/* principals for both names to the
> Apache keytab if they differ, and then configure mod_auth_kerb to accept
> any credential that's available in the keytab.  Last time we did testing,
> Firefox did one thing and IE did the opposite thing, so you'll have
> substantial numbers of users in both camps.

So if my hostname is machine.example.com and virtual hostname 
virtual.example.com I have to add both in keytab? I did try that didn't 
help me either.