More recent Kerberos implementations can be configured to force the use of tcp/ip connections.