krb5-auth-dialog is a simple tray applet that monitors kerberos tickets. It pops up reminders when the ticket is about to expire. Tickets can be refreshed at any time by clicking on the tray icon. It can also operate in "classic mode" as a simple dialog without any trayicon.
It features ticket autorenewal and supports pkinit.