The objective is to use a central MIT Kerberos service to authenticate
eDirectory users. My first obstacle seems is importing the ssl
certificate into the java keystore.

If I export the certificate in der format as the documentation suggests
there is no option for the private key and password, but when running
this command:

keytool -import -alias "kerbcert" -file /root/oes-cert.der -keystore

Then it prompts for a password.

Any idea what I'm doing wrong?

Also any additional documentation or reference I may need than this:

would be appreciated.

Again for starters just trying to enable the imanager kerberos task as
of right now all I get is this:

Authentication Failed, One possible cause could be that the SSL
certificate is not properly Installed. Install the certificate in the
JAVA keystore.

Thank you in advance,

David Brown