krb5_sname_to_principal or LDAP/SASL/GSSAPI and reverse DNS

[Sam Hartman]

So I think this discussion has gone on long enough.  We're not
planning on making on making any sweeping changes to how
canonicalization works before KDC aliasing support is implemented and
we have no plans to implement that right now although we do realize it
is necessary at some future point.

I'm interested in suggestions like Paul's to see if we can make the
current situation more reasonable.

Suggestions or discussion that involves changing how people deploy
clusters or other setups is really out of scope for anything we can do
soon.