You can solve your local ticket store by using LoginContext and appropriate keytabs. Obtain the GSSCredential and go. Every connection instance can act independently. Regardless of the OS.
If you cache the subject issued by the aforementioned LoginContext, you can always say: GssCredential#getRemainingLifetime or invoke a fresh LoginContext as you think fit.
Unfortunately, HTTPClient does not support direct use of GSSCredential and always assumes implicit credential. Fortunately, there are several ways to solve that problem too.