Calvin Winkowski wrote:
Did you already try with -N?
Nope, a bit embarrassed that I didn't find that on my own. Thanks! It does work with the -N flag.
I think there is still argument for making that the default and providing a flag to canonicalize the hostname, but I don't know enough about GSSAPI's standard to say for certain. I've only used it with Kerberos.
IIRC there was a long-winding sasl-no-canonicalize debate on the mailing lists a while ago. I'm pretty sure nobody wants to repeat that.