MIT Kerberos KDC must be configured to use eDirectory for storing its principals.
For more information about how to configure Kerberos, refer to Extending the Kerberos Schema and MIT Kerberos Documentation.
Universal Password must be enabled for eDirectory users who have associated Kerberos principals.
For more information about enabling Universal Password, refer the Deploying Universal Password section in the NetIQ Password Management Administration Guide.