[Unit]
Description=kinit -k on startup before rpc.gssd starts
After=syslog.target
After=network-online.target
Wants=network-online.target
Before=rpc-gssd.service
Before=nfs-common.service
ConditionPathExists=/etc/gss-principal

[Service]
EnvironmentFile=-/etc/gss-principal
RemainAfterExit=true
PermissionsStartOnly=True
Type=oneshot
ExecStart=/usr/bin/kinit -k $GSSPRINCIPAL -c /run/gssd/krb5cc_0
RuntimeDirectory=gssd
RuntimeDirectoryMode=0775
User=root
Group=root

[Install]
WantedBy=multi-user.target