It was discovered that on parallel upcalls to gssd for uid=0, one of the upcalls would fail because krb5_cc_initialize() is not concurrency safe. It was suggested that instead gssd is changed to use a different sequence of api calls that kinit uses. https://mailman.mit.edu/pipermail/krbdev/2025-February/013708.html Olga Kornievskaia (2): nfs-utils: gssd: unconditionally use krb5_get_init_creds_opt_alloc nfs-utils: gssd: do not use krb5_cc_initialize utils/gssd/krb5_util.c | 140 ++++++++++++++++++----------------------- 1 file changed, 60 insertions(+), 80 deletions(-) -- 2.47.1
