Kerberos clients can be installed automatically, installed from a script, or manually configured by editing configuration files. For protected network logins, the PAM framework provides the pam_ldap module. See the pam_ldap(5) man page. Also, when the client requests a service, that service can be granted by a server other than the master KDC.