Samba4 Kerberos: Bad request for forwardable ticket

[steve]

Hi everyone

when I do:
kinit Administrator
then
ldbedit -e gedit --url=ldap://sam4dc.polop.site --kerberos=yes  
--krb5-ccache=/tmp/krb5cc_0 cn="something"

I get this:
Kerberos: TGS-REQ Administrator at POLOP.SITE from ipv4:192.168.1.6:53060 
for krbtgt/POLOP.SITE at POLOP.SITE [forwarded, forwardable]
Kerberos: Bad request for forwardable ticket
Kerberos: Failed building TGS-REP to ipv4:192.168.1.6:53060

But I can edit the object just fine.
Have I got the syntax right?
Is there a less verbose syntax I could use?

All I want to do is use ldbedit (or any ldbxxxx) without having to type 
in the pwd each time.

Cheers,
Steve