I don't know what the best practice for kerberos is with regards to security. I was wondering is it a good idea to allow a kerberos server to be public so public servers can use single-sign on or is it something that is only reserved for internal lan.
Also the kerberos server is an Windows Server that has other services on it as well. What would you guys do?