You are aware of course that Kerberos and NIS do fairly different things. Kerberos is not a directory; it only stores authentication information, not account preferences, etc. I generally find myself deploying Kerberos and LDAP in conjunction to replace NIS.