I have worked on setting up complex kerberos authentication (double/tripple hops,contrained delegation, protocol transition etc) for websites in windows enviroment and if anything breaks in the whole process,things became a nightmare to figure out where the error is.I cannot imagine a mixed environment setup with unix/MIT kerberos.