Some articles to expose the way Kerberos is used by Microsoft ™ :
HTTP-Based Cross-Platform Authentication via the Negotiate Protocol
RFC 2478 - The Simple and Protected GSS-API Negotiation Mechanism