Andreas> According to [1], the upstream implicit default of "rdns =
Andreas> true" is there for historical reasons only, and upstream
Andreas> suggests to consider setting it to "false":
Andreas> """ Consider setting rdns to false in order to reduce your
Andreas> dependence on precisely correct DNS information for service
Andreas> hostnames. Turning this flag off means that service
Andreas> hostnames will be canonicalized through forward name
Andreas> resolution (which adds your domain name to unqualified
Andreas> hostnames, and resolves CNAME records in DNS), but not
Andreas> through reverse address lookup. The default value of this
Yeah, this makes sense.
Thanks for reporting this.
I will try to get to this and getting krb5 1.20 into unstable by end of
DebConf. I'm not at the conference, but that's a good time frame to
give myself a deadline.