I'm pretty new to chromebooks, but as far as I can tell, then never sign into AD. They sign into google apps, which might be a mirror of your LDAP, but no kerberos. There might be an option to sign into a third-party authentication via SAML, which is backed by AD, but it still won't be a kerberos token.