9750f2d915
Whilst Windows does not canonicalize enterprise principal names if the canonicalize flag is unset, the original specification in draft-ietf-krb-wg-kerberos-referrals-03.txt says we should. Non-Windows deployments of Heimdals are unlikely to understand enterprise principal names in tickets, and are also unlikely to set the canonicalize flag, so this makes sense. (It was also the behavior prior to moving the name canonicalization logic into the KDC.)