I evaulated it this week in a VM environment. If you are willing to hand over DNS control to it and follow carefully along with the documentation and 'gotchas' then it's dead simple to setup a Kerberos/LDAP/PKI Linux domain.
How it translates to real world usage is something else. But as far as the setup it's dead simple.