i tested this with ftp/curl and it fixes the build with base GSSAPI, which was previously broken.

there's another issue relating to library paths where we pick libraries essentially randomly from either /usr/lib or /usr/local/lib in a way that doesn't look functional:

% ldd /usr/local/bin/curl | egrep 'gss|krb5'
	libkrb5.so.122 => /usr/lib/libkrb5.so.122 (0x3a5390104000)
	libgssapi_krb5.so.122 => /usr/lib/libgssapi_krb5.so.122 (0x3a53903a5000)
	libkrb5.so.3.3 => /usr/local/lib/libkrb5.so.3.3 (0x3a5392c20000)
	libgssapi_krb5.so.2.2 => /usr/local/lib/libgssapi_krb5.so.2.2 (0x3a538e56c000)
	libkrb5profile.so.122 => /usr/lib/libkrb5profile.so.122 (0x3a538ec4c000)
	libkrb5support.so.122 => /usr/lib/libkrb5support.so.122 (0x3a53958a0000)
	libkrb5support.so.0.1 => /usr/local/lib/libkrb5support.so.0.1 (0x3a539811f000)

but this probably only happens if you don't use poudriere and build things against base GSSAPI while also having security/krb5 installed, which is not the most common use case.

if D51842 lands, i'll update this to use /usr/libdata/pkgconfig/mit-krb5-gssapi.pc instead of /usr/include/krad.h.

I think you should go ahead and assume that D51842 will land

Go ahead and do the pkgconfig change. It's certainly better than what I have been doing.

In D51841#1184825, @cy wrote:

Go ahead and do the pkgconfig change. It's certainly better than what I have been doing.

thanks -- does that mean you're also okay with D51842? (that's needed to actually install the pkgconfig files in base.)