I came across this forum subject when having problems getting the captive portal to authenticate with AD through kerberos.
I resolved it by syncing the time on my zeroshell box with my AD server and turning on DNS discovery.
Hope this may help others having problems.
