> caller is that the functionality which auto-corrects for Realm Doesn't that only work for local-profile entries anyway? A quick look at the code snippet you posted didn't indicate any support for DNS-based (draft-ietf-krb-wg-krb-dns-locate-02) records...