TL;DR

FreeIPA Demo lets you experiment with Kerberos (and LDAP).

An asciinema ASCII-cast is worth a thousand words (even though it’s about 32 kbytes πŸ™„):

Stay safe!