Well, it would be great if Mac OS X (10.4 to 10.6) could auto renew Kerberos tickets. Short of that — is there a way to extend the life of a Kerberos ticket from like 10 hours to 18 hours? I get a lot of Help Desk tickets from my Mac users when SSO stops working because they were signed in overnight and they complain about having to type in their password.