Move the kinit call before the connection, otherwise failure
Move the kinit call before the connection, otherwise failure

Also move the user existence code as it is both necessary for
the init and it saves us the trouble of initializing the IPA
API if it fails.

rcritten/novajoin