referrals in 1.6

[Nicolas Williams]

On Tue, Feb 27, 2007 at 09:08:07AM -0500, Jeffrey Altman wrote:
> Mark Phalan wrote:
> >>     Mark> 02/23/07 06:55:18  02/23/07 16:53:42  host/z4.acme.com@
> >>     Mark>         renew until 02/24/07 06:53:42
> >>     Mark>                                                        ^^^^^^^^^^
> >>     Mark>                                                        No Realm.
> >>     Mark> Is this expected behaviour?
> >>
> >> Yes.  If you do anything else, you won't cache the resulting
> >> principal.
> > 
> > Ok, makes sense. It is however slightly confusing when referrals are NOT
> > used.
> 
> Would it have been less confusing if the name of the service principal were:
> 
>    host/z4.acme.com at RESERVED:KDC-REFERRAL:

A better UI would be nice, yes.  Specifically, it'd be nice to show the
input service principal name, the method used for canonicalizing it, and
the canonicalized name.