Kerberos contexts - definition?

[Derek Warren]

Okay, since (quite understandably) nobody wants to touch my earlier
NFSv4/AD/Kerberos question, here's a simple one:

Given a working Kerberos environment where I can kinit -k HOST$ and add
a service principal:

1) What is a Kerberos context?

2) Why would rpc.gssd on the client be unsuccessful in creating a
Kerberos context?

Googling "krb5 context" or "kerberos context" mostly results in source
code and other people suffering through Kerberized NFS, but no
definitive answers about what a context is or why exactly creating a
krb5 context would fail.

Can anyone offer any ideas?


Many thanks,
--
Derek Warren, IT Services, Research Computing Group, Simon Fraser University