Created attachment 442378 [details] build log Due to bugreport http://bugs.gentoo.org/165444 https://bugzilla.mindrot.org/show_bug.cgi?id=1008 a patch was introduced net-misc/openssh/files/openssh-7.2_p1-GSSAPI-dns.patch + const char *gss_host; + + if (options.gss_trust_dns) + gss_host = get_canonical_hostname(1); + else + gss_host = authctxt->host; Unfortunately the function get_canonical_hostname was removed, comment in Changelog: commit 885fb2a44ff694f01e4f6470f803629e11f62961 Author: Darren Tucker <dtucker@zip.com.au> Date: Tue Mar 8 11:58:43 2016 +1100 auth_get_canonical_hostname in portable code. "refactor canohost.c" replaced get_canonical_hostname, this makes the same change to some portable-specific code. commit 95767262caa6692eff1e1565be1f5cb297949a89 Author: djm@openbsd.org <djm@openbsd.org> Date: Mon Mar 7 19:02:43 2016 +0000 upstream commit refactor canohost.c: move functions that cache results closer to the places that use them (authn and session code). After this, no state is cached in canohost.c feedback and ok markus@ Upstream-ID: 5f2e4df88d4803fc8ec59ec53629105e23ce625e So with the patch this breaks gssapi as mentioned in the mindrot.org burgreport.
Created attachment 442380 [details] emerge --info
*** Bug 590414 has been marked as a duplicate of this bug. ***
should be fixed: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=dc520c7f9c8b814fe4a8e982ec9b31611aef1ced
