using mod_auth_kerb and Windows 2000/2003/2008R2 as KDCQuoting Henry B. Hotz: Safari supports HTTP-Negotiate out of the box since mid-MacOS 10.4.x or so. It does not support delegation, period. Prerequirements of knowledge: Kerberos depends on a working and proper configured DNS because the application server's hostname is part of the Kerberos service-principal and the service-tickets. This tutorial expects you to know What's an A-record, a PTR-record
