fix kerberos username