Hello,
See: Kerberos(SSO): throw RC4 away, adopt AES !
AES is the only good choice if your clients are Windows Vista or above and your servers are Windows 2008 R2 or above.
If you have a mix of Windows + Linux you'll have to investigate further.
Regards,
Stephane.