Reality: install krb5-workstation, configure krb5.conf, obtain whatever tickets you want from your AD with your local Linux user account. So the only ugly'ish thing I will have to do is write a user ...