[Samba] Is there a listprincs equivalent?

[Lars Hanke]

I joined a machine. net ads testjoin says OK. The join exported a 
keytab, which among others contains MACHINE$@REALM. However, trying 
k5start I get "Client not found in Kerberos database". Also  kinit -t 
/etc/krb5.keytab MACHINE\$@REALM claims that the client was not found. 
But then, how did it come into the keytab?

Is there a tool to list the principals in AD?

Kind regards,
  - lars.