Sounds perfectly right to me. > Okay, so it sounds like the thing to do then is to support: > ...etc... > (And of course port number specs in krb5.conf or SRV records both > override this whole approach.)