I use Kerberos at home. So do a couple of faculty. I have a Kerberos https: proxy set up on one of our public web servers. This is less than ideal, as it requires installing separate Kerberos software for both Mac and Windows. The Kerberos protocol is standardized across OSs, but not the proxy support (nor the OTP support).

On Nov 11, 2019, at 5:00 AM, Alex Corcoles via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:

Yeah, I think running FreeIPA servers on the public Internet is really not a supported configuration, so I wouldn't worry too much about this (IMHO, supporting running FreeIPA on the public Internet would be nice, but this has already been discussed).