I would like to be able to take advantage of Kerberos without having to join my machine to the domain.
Why? Because this is a personal machine and we are not allowed to join them the corporate domain (nor we can).
Here is my partial success so far. I was able to setup Kerberos authentication but only on Firefox and Google Chrome, on Safari it doesn't work and it seems to be impossible to make it work without really joining the domain.
OS X Kerberos Setup
Now you can use
Base on https://www.pingidentity.com/support/solutions/index.cfm/How-to-configure-supported-browsers-for-Kerberos-NTLM#safari it seems that Safari will use SPNEGO only when it is joined into the domain. Otherwise it will only try NTLM which is probably disabled as being insecure.
Any contributions are more than welcomed!