Is there a cohesive solution existing to allow for Macintosh users running pre-OSX macOS to log into a kerberos domain and access /afs ?? Yes, you should use netatalk and the authman UAM, available from the University of Michigan.