Explanation/Reference:
Kerberos integrates with LDAP servers - allowing the principals and encryption keys to be stored in the common repository.
The complication with Kerberos authentication is that your organization needs to have a Kerberos KDC (Key Distribution Center) server setup already, which will then link to your corporate LDAP or Active Directory service to check user credentials when they request a Kerberos ticket.
References: https://www.rittmanmead.com/blog/2015/04/setting-up-security-and-access-control-on-a-big- data-appliance/