SPNEGO and Delegation in Java

I use SPNEGO to authenticate my webapp. I would like to use ticket delegation to开发者_开发知识库 authenticate to LDAP on server side. But there is no ticket cache on server side since login (kinit) is done on client side. How can I do sso please?

CLIENT --(spnego)---> SERVER ----(?delegation?)---> LDAP

---

Java's maintaining its own ticket cache. I have exaclty that setup up an running. What did you implement so far?