Using Director from a different domain is not working in v16.7.25

Hi,

We have this scenario: 

  1. eB Application server is installed in a domain but some users are logged in a different domain. 
  2. The domains belongs to different Forests.
  3. There are no "Trusted Relationship" between the domains.
  4. The user has the same username and password in both domains DomainA\User1 = DomainB\User1, passwords are IDENTICAL.
  5. Anyway, this situation should not cause any impact, since the authentication method used in eB is the most standard one: "eB Authentication".
  6. The certificate used in the SMC is installed and working fine in the user's workstation.  In Director, when the Application Server is referenced by it's name, no certificate warning is displayed and the Community list is displayed correctly.
  7. But when the user tries to log-in, the following message appears: Error message: The HTTP request is unauthorized with client authentication scheme 'Negotiate'. The authentication header received from the server was 'Negotiate'
  8. The very strange thing is that, In Director when the Application Server is referenced by IP, a certificate warning is displayed (as expected), but after clicking the "Connect Anyway" button, the Community list is displayed correctly and the user CAN log-in.  The users can perfom any action in Director but one: Cannot access any file.  It receives the same error: Could not connect to the storage module on the server 'SERVERNAME' for the repository with ID '1'. Error message: The HTTP request is unauthorized with client authentication scheme 'Negotiate'. The authentication header received from the server was 'Negotiate'.

PLEASE notice:

  1. The SPN commands were correctly ran:
    1. setspn -s HTTP/SERVER DomainA\eBServiceAccount
    2. setspn -s HTTP/SERVER.domainA.local DomainA\eBServiceAccount
  2. Director is working fine in the eB Application Server
  3. Director is working fine when the user is logged on in the same Domain as the eB Application Server

Please, advice ASAP, thanks a lot,

Sebastian.