The Kerberos service is compiled to use DNS to resolve host names. The nsswitch.conf file is not consulted at all when host name resolution is done.