On Thu, Sep 28, 2017 at 05:26:22PM +0000, Evan Hunt via RT wrote:
> 
> > => done. Ready for review. BTW I don't know if we want
> > a copyright in this trivial file (# is the comment char).
> 
> This looks fine and I'm tempted to just merge it, but Mukund, can you
> confirm that it fixes the problem first?

It does not. The following error occurs:

29-Sep-2017 01:00:57.407 gss cred: "muks@ISC.ORG", GSS_C_INITIATE, 30320
29-Sep-2017 01:00:57.407 failed gss_accept_sec_context: GSSAPI error: Major = Unspecified GSS failure.  Minor code may provide more information, Minor = Request ticket server DNS/blu.example.nil@EXAMPLE.NIL kvno 1 enctype rc4-hmac found in keytab but cannot decrypt ticket.
29-Sep-2017 01:00:57.407 process_gsstkey(): dns_tsigerror_badkey

After kdestroy:

29-Sep-2017 01:03:42.235 failed gss_inquire_cred: GSSAPI error: Major = Unspecified GSS failure.  Minor code may provide more information, Minor = No Kerberos credentials available (default cache: KEYRING:persistent:1000).
29-Sep-2017 01:03:42.235 failed gss_accept_sec_context: GSSAPI error: Major = Unspecified GSS failure.  Minor code may provide more information, Minor = Request ticket server DNS/blu.example.nil@EXAMPLE.NIL kvno 1 enctype rc4-hmac found in keytab but cannot decrypt ticket.
29-Sep-2017 01:03:42.235 process_gsstkey(): dns_tsigerror_badkey

		Mukund