krb5_sname_match
match = krb5_sname_match(context, mprinc, ent.principal);
if (!krb5_sname_match(context, server, tkt_server))
if (!krb5_sname_match(context, server, ent.principal)) {
if (krb5_sname_match(ctx, matching, princ) != t->result)