HDB2CREATE
ret = asprintf(&dn, "krb5PrincipalName=%s,%s", name, HDB2CREATE(db));
if (HDB2CREATE(db))
free(HDB2CREATE(db));