Help - Kerberos

[kul gupta]

Hi
  I am using MIT kerberos for authentication.
Currently the client needs to do kinit (or call
krb5_get_init_creds_password()) to get the TGT in which it direcly
communicates with KDC.
The envoirnment is that i dont want to make client directly communicate with
the KDC and still want to achieve kerberos authentication. Are there any
ways in which I can achieve this.
How can i implement Authorization(giving access to specific service for a
client)

I will really appreciate your help..

Thanks and Regards
kul