The ebuild "virtual/krb5-0-r1" is not masked and is satisfied by ">=app-crypt/mit-krb5-1.12.1-r1" OR ">=app-crypt/heimdal-1.5.3-r2". But that heimdal version is keyword masked on amd64. So only mit-krb5 will satisfy it. This causes a problem with "net-nds/openldap-2.4.38-r2" with USE smbkrb5passwd. OpenLDAP only wants heimdal, and something else is pulling in the virtual/krb5, which can only be satisfied by mit-krb5. That results in an unresolvable block. Reproducible: Always Steps to Reproduce: 1. Emerge openldap with smbkrb5passwd Actual Results: Blocks trying to pull in both heimdal (for openldap) and mit-krb5 (for virtual/krb5). Expected Results: heimdal should satisfy virtual/krb5, but doesn't because the version specified in the virtual ebuild is keyword masked.
*** This bug has been marked as a duplicate of bug 518006 ***