Need help configuring Fedora client authentication for 389 server with Kerberos

Question

Trying to setup kerberos authentication with 389-ds and having trouble figuring out how the two fit together.

Here is my setup:

1. A CentOS 6 VM (centos01) where I setup bind, 389 ds, and kdc services
2. A Fedora 17 VM (fedora01) - I want to authenticate to the CentOS box from this VM using a user account in the LDAP database on centos01

I used the "authentication" gui on the Fedora VM and it looks like it configured /etc/sssd/sssd.conf and /etc/nsswitch.conf for me.

Following the 389 docs, I setup the kdc server on centos01 and copied the krb5.conf and krb5.keytab to fedora01.

Now, confirming Kerberos is working, from fedora01 I can enter kadmin with a use principals I've created successfully.

I can also run ldapsearch from fedora01 with simple authentication and successfully query the LDAP database on centos01 like this: ldapsearch -x -b 'dc=lab2,dc=local'. But what do I do next?

From this point what do I have to do to be able to interactively login to fedora01 with an LDAP user account?

(PS: I know freeIPA pretty much does all this for you, but I wanted to build it out myself for learning purposes)