get kerberos objectclass