Windows SSO on Weblogic domain

Question

I am trying to use windows SSO on my weblogic domain. Application deployed in this weblogic should be accessible by the users in a special group (Defined in Windows Active Directory). Users should not get the prompt for username and password. Weblogic server should authenticate against Windows Active Directory.
I followed these instructions:
http://download.oracle.com/docs/cd/E14571_01/web.1111/e13707/sso.htm#i1106670
I am getting this error:
Error 401--Unauthorized
From RFC 2068 Hypertext Transfer Protocol -- HTTP/1.1:
10.4.2 401 Unauthorized
The request requires user authentication. The response MUST include a WWW-Authenticate header field (section 14.46) containing a challenge applicable to the requested resource. The client MAY repeat the request with a suitable Authorization header field (section 14.8). If the request already included Authorization credentials, then the 401 response indicates that authorization has been refused for those credentials. If the 401 response contains the same challenge as the prior response, and the user agent has already attempted authentication at least once, then the user SHOULD be presented the entity that was given in the response, since that entity MAY include relevant diagnostic information. HTTP access authentication is explained in section 11.
My weblogic server is running on Linux and I am trying to connect with Windows Active Directory Server.
Thanks

Answer 1

Do I have to create a new Active Directory user like "wlskerberos" for each machine on my domain?
yes, and u register the spn with that user
For the other question, refer to this link
http://weblogic-wonders.com/weblogic/2010/03/05/kerberos-in-a-proxyload-balancer-weblogic-cluster/
Hope this answers!