You should be able to check out a keytab for that user from the KDC and then everyone who can read that keytab can get such tickets. You then have to protect the keytab but that is often easier than keeping a password lying around. Harald.