match_entries
return match_entries(context, keytab, mprinc);
ret = match_entries(context, keytab, canonprinc);