kerberos and smartphone clients

[Nikolay Shopik]

Hello everyone,

     I'm in middle of process making my mail server Kerberized. 
Currently my infrastructure is only password based, but I plan move to 
PKINIT thus using certificate based authentication. Afterward I though 
about my smartphone clients who use email on their phones this is 
exclusively iPhone users.
     So this makes me think I should leave regular password based 
authentication for these mobile clients, which isn't great because you 
have to manage two separate db for logins/passwords. In same time I 
though every mobile phone have smart card already which is SIM card, 
there even EAP-SIM allowing use it to authenticate to wireless networks. 
So what best way to accomplish this task, without making huge pain when 
managing logins/passwords?