@peterpiller    I think you will need to setup cross-realm trust between two MIT KDC  for REALM_01 and REALM_02 if you have a mix of MIT KDC and AD then have a look at this  MIT/AD Kerberos setup this will ensure you have a valid ticket for both domains. HTH     ... View more