in reply to Re: Authenticating against Active Directory with Kerberosin thread Authenticating against Active Directory with Kerberos
In addition to port 88 you may need to open 750 on UDP and TCP (if you are using an older V4 server).