Thank you for the reply. I do have a tgt from the kerberos server. And (I think) I have the appropriate service principal. Here you go:
[root@gateway1-vm openldap]# klist -5
Ticket cache: FILE:/tmp/krb5cc_0
Default principal:
testldap1@SYSENGLAB.NET
Valid starting Expires Service principal
05/05/09 12:13:34 05/06/09 12:13:34 krbtgt/SYSENGLAB.NET@SYSENGLAB.NET
05/05/09 12:13:51 05/06/09 12:13:34 ldap/gateway1-vm
Thanks again.