Use cannonical DNS name when constructing the principal for passwd verification ...