I just set up the new ZCS 8 and try to get SSO with SPNEGO working.
I followed https://github.com/Zimbra-Community/...ocs/spnego.txt this howto and it works ... kind of.
I have to specify the target DC when creating the keytab file, probably because I have 4 DC's here, but not sure.
Aynway, it is created and the keytab file copied to the zimbra server as suggested. after a zimbra restart and the internet explorer set up, the following occurs in the log files:
GSSException: Defective token detected (Mechanism level: GSSHeader did not find the right tag)
Full part of the logfiles: zimbra spnego problem - Pastebin.com