Re-reading more closely it seems that krb5_put_principal() failed because of the locking issue but nonetheless still created the iprop ulog entry and marked it as committed. That would be a nasty bug I was not aware, but I believe it's fixed in master, and likely fixed in 1.11. Nico --