From d6df757fdc196f8cf1c6a7f1292ea4bf87440d73 Mon Sep 17 00:00:00 2001
From: Michal Nowak <mnowak@isc.org>
Date: Fri, 22 Mar 2024 11:31:23 +0100
Subject: [PATCH] Build FreeBSD with MIT Kerberos5 instead of Heimdal

tsiggss system tests crash or are unstable with the base FreeBSD
(Heimdal-based) GSS-API.
---
 .gitlab-ci.yml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 873d9f9866..5bc2b20656 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1334,7 +1334,9 @@ unit:clang:bookworm:amd64:
 clang:freebsd13:amd64:
   variables:
     CFLAGS: "${CFLAGS_COMMON}"
-    EXTRA_CONFIGURE: "${WITH_READLINE_LIBEDIT}"
+    # Use MIT Kerberos5 for BIND 9 GSS-API support because of FreeBSD Heimdal
+    # incompatibility; see https://bugs.freebsd.org/275241.
+    EXTRA_CONFIGURE: "${WITH_READLINE_LIBEDIT} --with-gssapi=/usr/local/bin/krb5-config"
     USER: gitlab-runner
   <<: *freebsd_13_amd64_image
   <<: *build_job
@@ -1360,7 +1362,9 @@ unit:clang:freebsd13:amd64:
 clang:freebsd14:amd64:
   variables:
     CFLAGS: "${CFLAGS_COMMON}"
-    EXTRA_CONFIGURE: "${WITH_READLINE_EDITLINE}"
+    # Use MIT Kerberos5 for BIND 9 GSS-API support because of FreeBSD Heimdal
+    # incompatibility; see https://bugs.freebsd.org/275241.
+    EXTRA_CONFIGURE: "${WITH_READLINE_EDITLINE} --with-gssapi=/usr/local/bin/krb5-config"
     USER: gitlab-runner
   <<: *freebsd_14_amd64_image
   <<: *build_job