Danilo, I haven't looked at the ticket, but I'm not sure if this is a bug. My understanding from Nico is that you should acquire credentials for the target mechanism, that is, if you are using SPNEGO you should use SPNEGO credentials. -- Luke