Microsoft
Microsoft
Microsoft
This is where you have to be a little creative. What you put there would more than likely work. Other than our recommendation here in the blog, is there another reason why you are wanting to use the Kerberos Authentication template? Do you need to support KDC Strict Validation Checks for some component you have / are implementing within the environment?
Anytime you deviate from our standards that we have configured; you should test in a lab all features to verify that it is going to work. We do not test every possible configuration when the OS is released. Since we do not test everything, not everything is going to be supported as we have no idea how other code is going to react to this change.
Why do you need this 3rd name for ldap? Why not make your ldap based application Site aware and leverage DC Locator to find a local domain controller for Active Directory to target your ldap calls.
It's really high time that most ldap based applications support AD a bit better. It has been decades that customers have been running Active Directory at this point. using site awareness and DNS to load balance ldap is way better and cheaper than buying a hardware load balancing solution to accomplish load balancing of ldap.