Yep, there were duplicate SPNs. Found them by using the LDP tool detailed here:-

http://technet.microsoft.com/en-us/library/cc772897(v=WS.10).aspx

Once removed, the server started to use KERBEROS authentication.

Andrew