The Java implementation of Kerberos doesn't support the 'rdns' flag:

http://docs.oracle.com/javase/8/docs/technotes/guides/security/jgss/jgss-api-mechanism.html

This flag is supported by the native client:

http://web.mit.edu/kerberos/krb5-latest/doc/admin/princ_dns.html