While testing the patch for bug #937 I discovered that ipapwd_post_op fails to update kerberos attributes.

It returns claiming the user have no kerberos attributes as pwdop.is_krb is 0.

This was tested performing a ldapmodify operation as admin and replacing the userPassword attribute.

Note that the kerberos keys were changed, so the pre_op part seem to be working as expected.