By default, MIT kerberos will perform DNS canonicalziation of the SPN,
controlled by the dns_canonicalize_hostname value in libdefaults:

https://web.mit.edu/kerberos/krb5-latest/doc/admin/conf_files/krb5_conf.html#libdefaults

However, Windows SSPI does perform any canonicalization at all that I can
find. Chrome/Chromium appears to perform the canonicalization itself, also
controllable via config:

https://dev.chromium.org/administrators/policy-list-3#DisableAuthNegotiateCnameLookup

Does curl have a similar config setting to control this behavior? If not,
can it be added?

-- 
Brandon Ewing                                     (brandon.ewing_at_warningg.com)

-----------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-users
Etiquette: https://curl.haxx.se/mail/etiquette.html