On 2/27/20 2:01 PM, Ben Gooley wrote: > Does MIT Kerberos support referrals by default or must canonicalization be > turned on in order to handle referrals? TGS referrals are supported by default, with a fallback to a non-referral request in some cases. AS request canonicalization (for initial tickets) must be explicitly enabled by the caller.