Kerberos authentication works when the domain is added in host file
<p>I have implemented kerberos authentication to a public website [like www.microsoft.com]. when I invoke it for authentication, The ticket returned is very short and it is not accepted by the AD server. </p>

<p>But If I add the load balancer IP to end-user's host file, proper ticket is returned and it is accepted by AD. I am confused about this behavior of Kerberos. Could someone shed some light on this.</p>