If the DNS suffix of the hostname of your Mac OS X Server v10.6-based server does not match the domain name of your Active Directory domain, for example the Active Directory domain is ad.apple.com, but the Mac OS X Server hostname is server.apple.com, services may not be able to use kerberos properly.

Read the original:
Mac OS X Server v10.6: Configuring service principals in Active Directory when using a disjoint namespace

Similar Posts:

• Mac OS X Server v10.6: Configuring iChat Server user attributes when used in a disjointed namespace
• Enabling iCal server access for users of Active Directory or third-party LDAP servers
• Mac OS X Server: Cannot authenticate to SMB shares when bound to Windows Server 2008 Active Directory
• Mac OS X Server: Cannot authenticate to SMB shares when bound to Windows Server 2008 Active Directory
• Mac OS X Server v10.6: Rosetta required for directory service migration from PowerPC-based Mac