On Thu, Feb 27, 2020 at 8:32 PM Greg Hudson <ghudson at mit.edu> wrote: > > AS request canonicalization (for initial tickets) must be explicitly > enabled by the caller. IIRC setting canonicalize=yes in krb5.conf also enables it.