It's been more than a decade since they replaced AFP with SMB as the default protocol for file sharing, and they've been warning that AFP would be going away for years.
Every OS update I try mounting with no ticket, get a panic, fill in the error reporting dialog with a nice “hope you had a nice holiday break!” message or whatever is seasonally appropriate, with the same simple steps to reproduce. It’s just kinda comical at this point.
My guess is kerberized NFS has absolutely zero users within Apple, and it’s likely hard to find an engineer there who even knows what Kerberos is anymore.
I used to work at Apple and I’d have filed a radar for it but now I’m just a customer so I’m powerless.
...the last version of Server shipped in 2021 (and the last real version shipped almost a decade before that).
In fact that’s probably the clue… everyone internally at Apple using krb5 auth with nfs is probably using the internal SSO software and the code path for “vanilla” Kerberos (ie. Ticket Viewer.app and so on) has zero testing. Maybe I’ll write that into the next crash tracer report I type up :-D
And yes, Im sure theres a very lonely radar bug for this. But even MM of revenue wont fix “edge cases” like this.
Small world!
I filed a radar while working there on a bug that was introduced in 2009 and it's still not fixed because it was low in the stack and the person responsible for it said they didn't think it was wise to make changes that late in the beta cycle (it was close to the annual release). It's never been fixed. I stopped checking major releases about five or six years ago.