Here are some articles that are interesting to read :
Centralized Authentication with Kerberos 5, Part I
Centralized Authorization Using a Directory Service, Part II