This command has changed since 10.8.
This is incorrect, as of 10.8 or great the command should now read, "sudo /usr/sbin/dsconfigad -enablesso -localuser user_name"
dsconfigad changed in 10.8, and the -enablesso command should be all lowecase for the command to work.
Kerberos