Created attachment 18859 [details] Patch to create host<fqdn> principcals instead of HOST<fqdn> Here's a patch that "fixes" this problem. It shouldn't be a problem if net ads join tills the AD to create host/<fqdn> since AD is case insensitive, but Unix utilities are not but there might be something I'm not aware of (perhaps make it selectable with some command line option). Anyway, it works for me... For an example of a unix tool that breaks if /etc/krb5.keytab contains HOST/<fqdn> is pam_krb5 (on FreeBSD)
hmm, we keep not quite fixing this class of problem. https://bugzilla.samba.org/show_bug.cgi?id=15759#c3 is relevant. Also, e.g. bug 9699 and bug 3671.