I'll just add this info about Kerb, in case someone's looking...

Your two servers must have their system times set closely...Within two mins, I believe. If not, you will get the infamous "Cannot generate SSPI context" message.

-Grubb