Michael Sweet, the main author of CUPS, is looking to enhance CUPS with Kerberos/GSSAPI support. Tracking RFE here: http://www.cups.org/str.php?L646 (BTW, filed an identical RFE a year ago that was closed by Michael Sweet due to lack of a GSSAPI+HTTP standard)