--- UPDATING	(revision 458934)
+++ UPDATING	(working copy)
@@ -5,6 +5,17 @@ 
 You should get into the habit of checking this file for changes each time
 you update your ports collection, before attempting any port upgrades.
 
+20180115
+  AFFECTS: users of security/py-kerberos
+  AUTHOR: John W. O'Brien <john@saltant.com>
+
+  Between 1.1.1_2 and 1.2.5 inclusive, security/py-kerberos build with
+  GSSAPI_BASE or GSSAPI_HEIMDAL would accept GSS_KRB5_NT_PRINCIPAL_NAME
+  principals of the form "service/hostname".
+
+  Starting with 1.2.5_1, all three GSSAPI types accept
+  GSS_C_NT_HOSTBASED_SERVICE principals of the form "service@hostname".
+
 20180111
   AFFECTS: users of editors/vim-lite
   AUTHOR: adamw@FreeBSD.org
--- security/py-kerberos/Makefile	(revision 458934)
+++ security/py-kerberos/Makefile	(working copy)
@@ -3,6 +3,7 @@ 
 
 PORTNAME=	kerberos
 PORTVERSION=	1.2.5
+PORTREVISION=	1
 CATEGORIES=	security python
 MASTER_SITES=	CHEESESHOP
 PKGNAMEPREFIX=	${PYTHON_PKGNAMEPREFIX}
--- security/py-kerberos/files/extra-patch-src_kerberosgss.c	(revision 458934)
+++ security/py-kerberos/files/extra-patch-src_kerberosgss.c	(working copy)
@@ -38,3 +38,12 @@ 
      if (kt) {
          krb5_kt_close(kcontext, kt);
      }
+@@ -150,7 +148,7 @@ int authenticate_gss_client_init(
+     name_token.value = (char *)service;
+     
+     maj_stat = gss_import_name(
+-        &min_stat, &name_token, gss_krb5_nt_service_name, &state->server_name
++        &min_stat, &name_token, GSS_C_NT_HOSTBASED_SERVICE, &state->server_name
+     );
+     
+     if (GSS_ERROR(maj_stat)) {
--- security/py-kerberos/files/extra-patch-src_kerberosgss.h	(revision 458934)
+++ security/py-kerberos/files/extra-patch-src_kerberosgss.h	(working copy)
@@ -1,11 +1,10 @@ 
 --- src/kerberosgss.h.orig	2015-03-29 03:41:32 UTC
 +++ src/kerberosgss.h
-@@ -14,8 +14,9 @@
+@@ -14,8 +14,8 @@
   * limitations under the License.
   **/
  
 +#include <krb5.h>
-+#define gss_krb5_nt_service_name GSS_KRB5_NT_PRINCIPAL_NAME
  #include <gssapi/gssapi.h>
 -#include <gssapi/gssapi_generic.h>
  #include <gssapi/gssapi_krb5.h>