adclient.krb5.principal
This configuration parameter specifies whether SAM account names or user principal names (UPNs) are used as the principal in Kerberos tickets. Supported values are sam and upn.
For example:
adclient.krb5.principal: sam
The default value is sam.
If you set this parameter to upn and no UPN is available, the sAMAccountName attribute with the format SAMAccountName@DomainName is used.
In MIT Kerberos environments, however, the UPN is used even if this parameter is set to sam.