If gssproxy isn't running then a client can deadlock if it is long-running.

Start in proxy/src/gpm_common.c in gpm_make_call()

There is a call to gpm_get_ctx(). This calls gpm_grab_sock() where the lock is taken then it tries to open the socket. If that open fails then an error is returned which causes gpm_get_ctx to return NULL. Since there is no context, no context is closed, leaving the lock as taken.

This is causing my client to deadlock after the first GSSAPI call when gssproxy is not running. In my case I'm calling gss_inquire_cred().