Giovanni Bricconi

It finally happened, after years earing from time to time about kerberos I had to use it, and at least for switching users was super stupid

kinit -k -t /path/tokeys/repo/temp.k who@DOMAIN
ksu newuser -e /bin/bash

then you have to know where the keys file is and somebody has to have done the set-up already, but this is another story