Similar to https://bugzilla.redhat.com/show_bug.cgi?id=1812702 , krb_rdns only applies to the old-style Kerberos authentication. It has no effect on the latest versions of Koji, because the latest versions use the newer-style GSSAPI authentication.