Alternatively you can work out the Kerberos stuff yourself but I have seen grown
men start crying trying to do it. Alternatively you can use a PAM module using
LDAP but that is a sucky way of doing it. LDAP isn't an authentication protocol
and the machine doesn't join the domain. Alternatively you can look at using SAMBA.