saslauthd.conf

# Have saslauthd use principals of the form "service/<hostname>", e.g.,
# "service/ldap-test-replica-sh-1" when authenticating to Kerberos.
#
# By default saslauthd will look for the credentials for this Kerberos
# principal in /etc/krb5.keytab, so be sure that the correct credentials
# are in that keytab file.
krb5_verify_principal: service