Kerberos SSO funktioniert nicht

[libdefaults]
default_realm = DOMAIN.IT
rdns = no
dns_lookup_kdc = true
dns_lookup_realm = true
dns_canonicalize_hostname = true

    [realms]
    DOMAIN.IT = {
    kdc = SG-DC-01.DOMAIN.IT
    master_kdc = SG-DC-01.DOMAIN.IT
    admin_server = SG-DC-01.DOMAIN.IT
    default_domain = DOMAIN.IT
    }

    [domain_realm]
    .DOMAIN.IT= DOMAIN.IT
    DOMAIN.IT = DOMAIN.IT

[login]
krb4_convert = true
krb4_get_tickets = false