[linux-cifs-client] Re: [PATCH] Add support for using server supplied principal (mic option)

[Love Hörnquist Åstrand]

>
> A correct configuration would use many CNAMEs all pointing to 1 A  
> NAME,
> the one used to join AD.
> I would stick to a secure behavior and disable fetching a ticket using
> the MIC information by default.

Use "setspn -a host/alias computername" to add the aliases to the SPNs  
and it doesn't matter what name the client uses.

The gssapi library does dns canon, its wrong, but there is no good way  
to stop doing since that breaks stuff :(

Love