diff --git a/lib/krb5/krb5.h b/lib/krb5/krb5.h
index 4a7c2ca30..9a81abda9 100644
--- a/lib/krb5/krb5.h
+++ b/lib/krb5/krb5.h
@@ -898,8 +898,7 @@ typedef enum krb5_name_canon_rule_type {
 typedef enum krb5_name_canon_rule_options {
 	KRB5_NCRO_GC_ONLY = 1 << 0,
 	KRB5_NCRO_NO_REFERRALS = 1 << 1,
-	KRB5_NCRO_NO_REVLOOKUP = 1 << 2,
-	KRB5_NCRO_SECURE = 1 << 3
+	KRB5_NCRO_SECURE = 1 << 2
 } krb5_name_canon_rule_options;
 
 typedef struct krb5_name_canon_rule *krb5_name_canon_rule;
diff --git a/lib/krb5/principal.c b/lib/krb5/principal.c
index 0b6325a0e..ba63149cd 100644
--- a/lib/krb5/principal.c
+++ b/lib/krb5/principal.c
@@ -1328,10 +1328,6 @@ rule_parse_token(krb5_context context, krb5_name_canon_rule rule,
 	rule->options |= KRB5_NCRO_NO_REFERRALS;
     } else if (strcmp(tok, "use_referrals") == 0) {
 	rule->options &= ~KRB5_NCRO_NO_REFERRALS;
-    } else if (strcmp(tok, "reverse_lookup") == 0) {
-	rule->options &= ~KRB5_NCRO_NO_REVLOOKUP;
-    } else if (strcmp(tok, "no_reverse_lookup") == 0) {
-	rule->options |= KRB5_NCRO_NO_REVLOOKUP;
     /* Rule ancilliary data: */
     } else if (strncmp(tok, "domain=", strlen("domain=")) == 0) {
 	free(rule->domain);