else
hflags |= HDB_F_GET_ANY;
+ /* always set this or the created_by data will not be populated by samba's
+ * backend and we will fail to parse the entry later */
+ hflags |= HDB_F_ADMIN_DATA;
+
code = ks_get_principal(context, princ, hflags, kentry);
k5_mutex_unlock(ks->lock);