Remove cached tokens from the Windows client

For SPNEGO to work correctly, we must remove any cached Kerberos tokens from the Windows client. When a client contains cached Active Directory credentials, SPNEGO might not work correctly on the client until it obtains the new credentials.

Steps

1. Run klist on the Windows desktop client to determine the presence of old Kerberos tokens.

2. If old tokens are present, take one of the following actions:
   • Run klist purge to delete each token.
   • Restart the Windows desktop.

Parent topic: Configure Windows desktop single sign-on