>Perhaps in the meantime we should add a command line switch >--permit-dotted-krb5-names That would be fine with me; people who understood this issue could choose to disable the check. --Ken