failed to verify krb5 credentials

[abbas.attarwala@gmail.com]

ok i am getting this now:

WWW-Authenticate: Negotiate
WWW-Authenticate: Basic realm="Kerberos Login"

ticket is still issued to any user who logs on to apache and all works
fine. Only thing that worries me, is why am i still getting that
WWW-Authenticate: Basic

on using a sniffer tool, I can see the password of my test user. this
is bad. 

where am i going wrong?

thanks