The keytab file is only necessary if you want someone to be able to log in with just a Kerberos TGT. With the above PAM config, the user's password is passed to the Kerberos server for auth.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results