How to join an existing MIT Kerberos Realm in 10.4 server?

Perhaps this is just as simple as putting a valid edu.mit.kerberos file /Library/Preferences and creating a keytab file in the realm I want to join, and putting that at /etc/krb5.keytab in each of the servers in OD domain, but I have yet to confirm that.

I have four 10.4.5 XServers in an Open Directory domain that consists of about 100 users. I have one of the servers set up as OD master and a second as a failover. These systems are also part of an XSAN.

My university provides a Kerberos 5 realm, and most of the users in my OD are members of that Kerberos realm. So what I want to do is to enable my servers to use the University MIT Kerberos realm, so they can use their “University” password–and so I don’t have to manage passwords.

All of the users’ short names are identical to their principle names in the University Kerberos realm.

I have tried using the Server Admin interface and the “Join Kerberos . . . ” tool, but when I enter the principle and password, the realm name and the DNS of the KDC it always fails with “error creating the keytab file.”

Is it possible to have OD use one LDAP domain and a different Kerberos realm, whose user names overlap.