Andreas> According to [1], the upstream implicit default of "rdns = Andreas> true" is there for historical reasons only, and upstream Andreas> suggests to consider setting it to "false":
Andreas> """ Consider setting rdns to false in order to reduce your Andreas> dependence on precisely correct DNS information for service Andreas> hostnames. Turning this flag off means that service Andreas> hostnames will be canonicalized through forward name Andreas> resolution (which adds your domain name to unqualified Andreas> hostnames, and resolves CNAME records in DNS), but not Andreas> through reverse address lookup. The default value of this Yeah, this makes sense. Thanks for reporting this. I will try to get to this and getting krb5 1.20 into unstable by end of DebConf. I'm not at the conference, but that's a good time frame to give myself a deadline.