The authentication indicator stuff was enabled after little more digging through the documentation. But I'd really appreciate if anybody could help me with the keytab issue.
Alternatively, should I look towards PKINIT for getting TGTs that are later used for SSH, on non-IPA clients?