What must be configured before Kerberos can be used as the authentication method for LDAP?

An administrator is configuring LDAP for a vCloud Director system.
What must be configured before Kerberos can be used as the authentication method for LDAP?

A.
a Realm

B.
a custom LDAP service

C.
an OU

D.
an SSL Keystore