Trouble with service principal missing its realm

[Tim Alsop]

Jeffrey,

Regarding:

> A service ticket in the credential cache without a realm name
> is a service ticket that was obtained using server side referrals.
> The actual realm name was not specified by the client when
> requesting the service ticket.

[Tim Alsop] Is the fact that there is no realm, a bug, or is the cache supposed to contain tickets without a realm in this scenario ? Surely if actual realm was not specified, when the actual realm is determined by KDC, and ticket issued, this realm should be used when putting the ticket in the client cache ? if not, why not ?

Thanks,
Tim