[3.x] several fixes for samba-related profiles and the kerberos abstraction

See the individual commits for details.

Signed-off-by: Noel Power noel.power@suse.com

This is a backport of !989 (merged)

I propose this MR for 3.1, 3.0 - optionally also 2.13 if it can be cleanly merged.