Configuring SPNEGO SSO With AD

Can anyone answer a SPNEGO SSO question.
We have created a user in AD as described in SPNEGO SSO Active Directory Setup Guide (http://bofriis.dk/files/doc/spnego-activedirectory-configuration-.pdf). We have created the Keytab file using the KTPASS command. We then did the Configuring SPNEGO in the LiveCycle Admin Console as described in the Administering LiveCycle ES v 8.2 guide but we still can not seem to get SSO working. We have loaded LiveCycle ES 8.2 on a box running WebSphere.

This is the information in the log file.
[1/20/09 15:00:00:056 CST] 0000003b Reference I org.apache.xml.security.signature.Reference verify Verification successful for URI "#a084c894220aa09181e9fb0a79e910cc"
[1/20/09 15:00:00:088 CST] 0000003c Reference I org.apache.xml.security.signature.Reference verify Verification successful for URI "#a084c894220aa09181e9fb0a79e910cc"
[1/20/09 15:00:14:494 CST] 0000007a SpnegoRequest W com.adobe.idp.um.auth.filter.spnego.SpnegoRequestHandler doSpnego Error occured while authenticating using Kerberos config kdcHost = 144.45.250.93 : dnsIp = 144.45.4.133 : serviceRealm = my.comp.info : serviceUser = HTTP/xxxxxxx.my.comp.info
[1/20/09 15:00:14:494 CST] 0000007a SpnegoRequest W com.adobe.idp.um.auth.filter.spnego.SpnegoRequestHandler doSpnego TRAS0014I: The following exception was logged com.wedgetail.idm.sso.ProtocolException: com.wedgetail.idm.spnego.server.SpnegoException: org.ietf.jgss.GSSException, major code: 11, minor code: -1
major string: General failure, unspecified at GSSAPI level
minor string: com.dstc.security.kerberos.KerberosException: Could not decrypt service ticket with Key type 23, KVNO 6, Principal "HTTP/xxxxxxx.my.comp.info@my.comp.info" using key:
Principal: HTTP/xxxxxxx.my.comp.info@my.comp.info
Type: 1
TimeStamp: Tue Jan 20 14:55:04 CST 2009
KVNO: -1
Key: [23, 7c af 20 96 b7 b6 71 a0 da 70 15 5 1b c7 79 f6 ]
Exception for this key was: com.dstc.security.kerberos.CryptoException: Integrity check failure[Note: principal names are different; this may or may not be a problem]
[Note: KVNO used wildcard match, not exact match; perhaps the password used to generate this key is not the most recent password?]

at com.wedgetail.idm.sso.AbstractAuthenticator.processSpnego(AbstractAuthenticator.java:1221 )
at com.wedgetail.idm.sso.MechChecker.authenticate(MechChecker.java:205)
at com.wedgetail.idm.sso.AbstractAuthenticator.authenticate(AbstractAuthenticator.java:1060)
at com.wedgetail.idm.sso.AbstractAuthenticator.authenticateServiceTicket(AbstractAuthenticat or.java:998)
at com.wedgetail.idm.sso.AbstractAuthenticator.checkAuthentication(AbstractAuthenticator.jav a:953)
at com.wedgetail.idm.sso.AuthFilter.doFilter(AuthFilter.java:122)
at com.adobe.idp.um.auth.filter.spnego.SpnegoRequestHandler.doSpnego(SpnegoRequestHandler.ja va:208)
at com.adobe.idp.um.auth.filter.SSOFilter.doFilter(SSOFilter.java:195)
at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java: 190)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:130)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain._doFilter(WebAppFilterChain.java:87)
at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:832)
at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:679)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:565)
at com.ibm.ws.wswebcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:478)
at com.ibm.wsspi.webcontainer.servlet.GenericServletWrapper.handleRequest(GenericServletWrap per.java:122)
at com.ibm.ws.jsp.webcontainerext.AbstractJSPExtensionServletWrapper.handleRequest(AbstractJ SPExtensionServletWrapper.java:226)
at com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleRequest(CacheServletWrapper.jav a:90)
at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.ja