Sebastian,
I've enabled the kerberos debugger and have been looking through the stderr.log file. These are new to me but I'm trying to identity any clues as to why the attempt to login with manual AD hangs and then returns with this message:
Account information not recognized: The Active Directory Authentication plugin could not authenticate at this time. Please try again. If the problem persists, please contact your technical support department. (FWM 00005)
What I've noticed in the logs are the following patterns:
1) a 'info' section with details like this:
Feb 4, 2015 3:52:45 PM org.apache.catalina.startup.TaglibUriRule body
INFO: TLD skipped. URI: /WEB-INF/cetaglib is already defined
2) the above info ends with this JAVA IO message:
SEVERE: IOException while loading persisted sessions: java.io.EOFException
java.io.EOFException
This is followed by a number of lines with JAVA and Apache port numbers. This is then followed by more 'info' details.
3) The last section if the [DEBUG] details. What I see here is that Kerberos queries are being submitted and received and then the queries are re-submitted to the next AD server. The requests are repeated a number of times.
The last two lines of the log file are:
log4j:WARN No appenders could be found for logger (org.apache.axis2.deployment.WarBasedAxisConfigurator).
log4j:WARN Please initialize the log4j system properly.
As I've mentioned I'm not familiar enough with these logs to extract meaningful clues, does anything stand out for you?
Cheers, Paul