So I now have an OS X work laptop and did a kinit user@MYDOMAIN and... it worked!

I've seen some guides about joining an OS X system to FreeIPA, but I don't think I want that (we are not currently joining work OS X systems to a domain, but I suppose we will soon- and I guess joining two domains would be hairy), but I'm wondering if it's not crazy to kinit, get my Kerberos tickets and get SSO for https/ssh?

While having a ticket seems to not be enough to get SSH/Firefox to work, I'm wondering if it's viable to get it to work or if it's a waste of time because it cannot work or has serious limitations. It's mostly for learning purposes...

Cheers,

Álex
--