LDAP + Kerberos grouping/password

[Mathew Rowley]

Do you have to sync passwords between Kerberos and LDAP if I am using LDAP
for user specific information?  For example, if I ssh to a box, I want it to
authenticate with kerberos, but get the gid/uid/shell/homedir from LDAP.  Is
there a way to specify the LDAP PAM module to not to auth against LDAP, just
get the user information?

Thanks.
 
-- 
MAT