diff --git a/lib/libtelnet/Makefile b/lib/libtelnet/Makefile
--- a/lib/libtelnet/Makefile
+++ b/lib/libtelnet/Makefile
@@ -19,7 +19,8 @@
 CFLAGS+=	-DOPENSSL_API_COMPAT=0x10100000L
 .endif
 
-.if ${MK_KERBEROS_SUPPORT} != "no"
+.if ${MK_KERBEROS_SUPPORT} != "no" && ${MK_MITKRB5} != "yes"
+# MIT KRB5 deprecated and removed 3DES. Therefore no telnet support.
 SRCS+=		kerberos5.c
 CFLAGS+=	-DKRB5 -DFORWARD -Dnet_write=telnet_net_write
 .endif
diff --git a/usr.bin/telnet/Makefile b/usr.bin/telnet/Makefile
--- a/usr.bin/telnet/Makefile
+++ b/usr.bin/telnet/Makefile
@@ -30,7 +30,8 @@
 LIBADD+=	mp crypto ipsec pam
 .endif
 
-.if ${MK_KERBEROS_SUPPORT} != "no"
+.if ${MK_KERBEROS_SUPPORT} != "no" && ${MK_MITKRB5} != "yes"
+# MIT KRB5 deprecated and removed 3DES. Therefore no telnet support.
 CFLAGS+=	-DKRB5 -DFORWARD -Dnet_write=telnet_net_write
 LIBADD+=	krb5 roken
 .endif