On Wed, Aug 7, 2013 at 12:54 PM, Greg Hudson <ghudson at mit.edu> wrote: > Perhaps an option to select the principal name would be better. I agree. I often wish that ssh and others had such an option (and likely will contribute patches for that to OpenSS).