The test suite currently doesn't test TCP access to the KDC. Fix that. Try tweaking udp_preference_limit (see ticket 2277) and/or port numbers to force TCP to be used. Initial experimentation suggests we've got some bugs in correctly establishing TCP listening sockets in fast-restart situations like the test suite creates.