kvno failed with recent samba4

[Matthieu Patou]

Dear all,

I was trying to generate a keytab for a user and when I tried to get the 
kvno for this user
I got:

test:/usr/local/samba/private# kvno user_tst
user_tst at SMB4.TST: KDC policy rejects request while getting credential


And in the logs :

Kerberos: TGS-REQ user_tst at SMB4.TST from 192.168.99.2 for 
user_tst at SMB4.TST [canonicalize]
Kerberos: Principal may not act as server -- user_tst at SMB4.TST
Kerberos: Failed building TGS-REP to 192.168.99.2
Kerberos: TGS-REQ user_tst at SMB4.TST from 192.168.99.2 for user_tst at SMB4.TST
Kerberos: Principal may not act as server -- user_tst at SMB4.TST
Kerberos: Failed building TGS-REP to 192.168.99.2

The previous kinit worked.
Any idea of the problem ?
Matthieu.