I'm working inside a domain environment, served by Active Directory from a Windows 2008 host. I'm a regular "Domain User", with no special privileges and will not be able to get any.
When trying to setup my own Linux system to login via ssh with kerberos, I've run into a snag: I can't add a principal of the form: host/@DOMAIN
Which brings me to the question: is there any way around this to get single-sign-on (SSO) functionality?
If not, is there some other mechanism to accomplish SSO? (I'm guessing this would require setting up my own internal KDC).