In the LDAP back end, return aliases when the CLIENT_REFERRALS_ONLY flag isn't set (abusing that flag to recognize a client name lookup). Based on a patch from Luke Howard. http://src.mit.edu/fisheye/changelog/krb5/?cs=22708 Commit By: ghudson Revision: 22708 Changed Files: U trunk/src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c