I understand the importance of the keytab file in kerberos and was wondering if there is a way to force use of a keytab? So if the keytab does not exist on the host then it will not authenticate against kerberos.
The reason I ask this is that at least in the default setup a kinit or service using kerberos will work even without a keytab file. Is there a setting in krb5.conf I am not understanding correctly?
I am mostly a centos shop using krb5-workstation and pam_krb5 on the client boxes.