I had to add the explicit -lk5crypto to the list of libraries required for building my new net-mgmt/adcli against MIT-kerberos, because without it the build would die thus: /usr/bin/ld: undefined reference to symbol `krb5_c_string_to_key' (try adding -lk5crypto) /opt/lib/libk5crypto.so.3.1: could not read symbols: Bad value cc: error: linker command failed with exit code 1 (use -v to see invocation) This puzzles me, because the library is used by MIT's libkrb5.so already... Not sure, whether the fault is with gssapi.mk or the security/krb5-114 itself somehow, so just raising awareness here... I suspect, gssapi.mk is wrong, because it lists ``-lkrb5 -lgssapi_krb5'' in GSSAPILIBS, whereas krb5-installed ${PREFIX}/bin/krb5-config --libs lists ``-lkrb5 -lk5crypto -lcom_err'' instead.