Problems appear when accessing Kerberos protected site by IP address. For example:
http:/10.10.1.x:3001/ gives failure.
http:/10.10.1.x:3001/
http:/my-host:3001
Kerberos does not work with IP adresses, it relies on domain names and correct DNS entries only.