Specifies whether Kerberos authentication is allowed. This can be in the form of a Kerberos ticket, or if Password Authentication is yes, the password provided by the user will be validated through the Kerberos KDC. Default is ``yes''.