Yes. The Kerberos protocol simply allows users to get credentials and it
provides a way for applications to check them. A user can have more than one
credential at a time. Asssociating credential with a session is up to you. You
can certainly store a credential in a session-specific place.
> O
>We are login to Ubuntu 20.04 device using smartcard PIN. We are able to
>login as AD user successfully. We are using Windows 2019 AD Server.
So, I don't know what this means. I suspect that Kerberos isn't working
correctly here and you'll falling back to something else.
>We tried kinit manuall