Supplementing Jeff Altman's answer: we expect to have IAKERB support in MIT krb5 1.9, which is due out around the end of this year. Application support will probably be necessary to make it go, so it may be some time before end users can take advantage of it.