Increasing the max name length in krb5_kuserok is a fine thing to do. Kerberos 1.3 will increase this limit in the release; I think we increased it to 63 or so.