AD Authentication not working with CRS2008

Question

REPOSTED with some editing, since the formating didn't work as expected.
I have been trying for the better part of a week to enable AD authentication on a CRS2008 server.  No luck. 
Crystal Reports Server 2008 (CRS2008) (v 12.0.0.683) on a windows 2003 SP2 server.  Using the Tomcat server.
Everything pretty much default except location,files placed on D: drive     
I have configured everything according to the directtions in the document from SAP
Configuring Active Directory Authentication using Java Application Servers u2013 3/28/2007
I am receiving kerberos tickets.  When I use kinit with the service account, I recieve a ticket.  I can view it with Klist and KERBTray.     
In the CMC, AD is configured per the document mentioned above.
I do have a AD group that has populated the CMC, and I am able to view membership of that Group in CMC.     
There are no error messages in the logs. 
I am seeing the follwoing message when I try to login on the CMC page with an AD account:
Account Information Not Recognized: Active Directory Authentication failed to log you on. Please contact your system administrator to make sure you are a member of a valid mapped group and try again. If you are not a member of the default domain, enter your user name as .......    
thanks....

Answer 1

As a clarification, I tried using all three documents as follows:
Configuring Active Directory Authentication using Java Application Servers u2013 3/28/2007
https://www.sdn.sap.com/irj/boc/index?rid=/library/uuid/e0edd98d-c43e-2b10-e09a-e0a89931cedc&overridelayout=true
Configuring Vintela SSO in Distributed Environments u2013 Complete Guide
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0f6ac3c-b3ac-2b10-1b95-c9bd46194977
Configuring Vintela SSO in Distributed Environments u2013 Vintela Configuration Only
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/002b818d-3db2-2b10-9895-c7b5fd4cbc71
Domain is *************
AD Account used is ****** (yes AD shows it in all caps)
CRS 2008 server name is ***********  
AD user account elevated using SETSPN (SETSPN.exe u2013A BOBJCentralMS/**************************) - successful    
Delegation  set to Trust this user for delegation to any service (Kerberos only)
added to the local Admin group, security policy settings of Log on as a Service, Log on as a Batch job, and Act as part of the OS.  Entered in as ***********.    
set to start the SIA instead of local host.  Entered in as **********.
bscLogin.conf  
com.businessobjects.security.jgss.initiate {
com.sun.security.auth.module.Krb5LoginModule required debug=true;
The debug=true option is used only for testing and debug purposes and will be removed for production.    
Krb5.ini ; 
libdefaults]
default_realm = *********
dns_lookup_kdc = true
dns_lookup_realm = true
udp_preference_limit = 1
[realms]
*********= {
admin_server = ********
kdc = ********
kdc = ********
default_domain = *********
In the Tomcat properties screen, the u2018Java Optionsu2019 section I entered the following parameters at the bottom:
-Djava.security.auth.login.config=C:winnt scLogin.conf
-Djava.security.krb5.conf=C:winntKrb5.ini     
I am receiving kerberos tickets.  When I use kinit with the ********L account, I recieve a ticket.  I can view it with Klist and KERBTray.