I see kerberos is (briefly) mentioned in 'Learning eZ publish 3' as something "not yet available", is this under development? (when) will it be available?
I'm not aware of any development, but would like to see it too. For the moment we use LDAP here.
Kerberos could best be supported bu a login handler that uses apache -> from there it is a matter of configuring apache. Single sign on would be even better (intranets), afaik there are some initiatives but did not look at them the past months.