adclient.krb5.principal

This configuration parameter specifies whether SAM account names or user principal names (UPNs) are used as the principal in Kerberos tickets. Supported values are sam and upn.

For example:

adclient.krb5.principal: sam

The default value is sam.

If you set this parameter to upn and no UPN is available, the sAMAccountName attribute with the format SAMAccountName@DomainName is used.

In MIT Kerberos environments, however, the UPN is used even if this parameter is set to sam.