Without krb5-config the build depend on krb5-config provider (I'm not sure if app-crypt/mit-krb5 is the only provider of this file) the build succeeds but it underlinks: checking whether to enable maintainer-specific portions of Makefiles... no ./configure: line 2864: krb5-config: command not found ./configure: line 2865: krb5-config: command not found checking for x86_64-pc-linux-gnu-gcc... x86_64-pc-linux-gnu-gcc % ldd -r /lib64/libtirpc.so.1.0.10 linux-vdso.so.1 (0x00007fffaa346000) libnsl.so.1 => /lib64/libnsl.so.1 (0x00007fe70b0ea000) libpthread.so.0 => /lib64/libpthread.so.0 (0x00007fe70aecc000) libc.so.6 => /lib64/libc.so.6 (0x00007fe70ab24000) /lib64/ld-linux-x86-64.so.2 (0x00007fe70b53c000) undefined symbol: GSS_C_NT_HOSTBASED_SERVICE (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_accept_sec_context (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_release_name (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_duplicate_name (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_wrap (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_release_cred (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_get_mic (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_acquire_cred (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_delete_sec_context (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_verify_mic (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_release_buffer (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_import_name (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_init_sec_context (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_display_name (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_sign (/lib64/libtirpc.so.1.0.10) undefined symbol: gss_unwrap (/lib64/libtirpc.so.1.0.10) This causes later builds to fail
i have no idea about USE=kerberos and plan on remaining ignorant. we have a kerberos@ team that we let cover all such questions.
actually, looks like some people in bug 493912 already posted solutions *** This bug has been marked as a duplicate of bug 493912 ***