samba4 kerberos user principals with instances

[Dewayne]

David,
The creation of additional principles in samba4 is achieved by creating a user record and then the spn. 

Example:
samba-tool user create http-user --random-password
samba-tool spn add HTTP/www.mansfieldsite.org  http-user
samba-tool domain exportkeytab --principal=HTTP/www.mansfieldsite.org http.keytab

Samba4 Kerberos is based on the heimdal implementation. Perhaps you could be clearer about what aspect you regard as rubbish?  

Ref: http://gitweb.samba.org/?p=lorikeet-heimdal.git;a=summary

Kind regards, Dewayne.