mbox series

[0/2] nfs-utils: gssd: do not use krb5_initialize

Message ID 20250225214607.20449-1-okorniev@redhat.com (mailing list archive)
Headers show
Series nfs-utils: gssd: do not use krb5_initialize | expand

Message

Olga Kornievskaia Feb. 25, 2025, 9:46 p.m. UTC
It was discovered that on parallel upcalls to gssd for uid=0,
one of the upcalls would fail because krb5_cc_initialize() is
not concurrency safe.

It was suggested that instead gssd is changed to use a different
sequence of api calls that kinit uses.

https://mailman.mit.edu/pipermail/krbdev/2025-February/013708.html

Olga Kornievskaia (2):
  nfs-utils: gssd: unconditionally use krb5_get_init_creds_opt_alloc
  nfs-utils: gssd: do not use krb5_cc_initialize

 utils/gssd/krb5_util.c | 140 ++++++++++++++++++-----------------------
 1 file changed, 60 insertions(+), 80 deletions(-)