This change needs made due to a known incompatibility in Samba. It just tripped me up because I wasn't looking too closely. I'm honestly not sure how best to implement this as a CONFLICTS?= unfortunately. Despite having been 'funded' ages ago, this is still a problem. For reference as to the problem (Samba not supporting MIT Kerberos for AD/KDC): net/samba45/work/samba-4.5.7/BUILD_SYSTEMS.txt https://wiki.samba.org/index.php/MIT_Build http://k5wiki.kerberos.org/wiki/Projects/Samba4_Port https://access.redhat.com/discussions/1235263
Can you, please, describe how did you hit this problem? Samba4* ports are compiled with the bundled Heimdal Kerberos libraries, you need to take special measures and alter the port to compile against MIT Kerberos.
One would think that, right? Sadly, no such luck; based on the errors I got, it definitely got contaminated. As to how, it was via /etc/make.conf: SAMBA4_PORT=net/samba45 DEFAULT_VERSIONS+=samba=4.5 DEFAULT_VERSIONS+=ssl=openssl WANT_OPENLDAP_SASL=yes OPTIONS_SET+=WANT_OPENLDAP_SASL OPTIONS_SET+=GSSAPI GSSAPI_MIT GNUPG2 That was enough to somehow end up contaminated (possibly via another port) resulting in unexpected breakage. Rebuilding now with OPTIONS_SET+=GSSAPI_HEIMDAL to confirm that behaves better.
Is this still relevant for Samba 4.6 and higher?
Not sure can this be considered as a fix, but as of Samba 4.8 you can compile it with the GSSAPI_MIT.