Apply a patch derived from Fedora to fix krb5-config : * Make krb5-config suppress CFLAGS output when called with --libs In unpatched krb5, the output of "krb5-config --libs" contains the current value of the CFLAGS : # CFLAGS="SOME CRAP" krb5-config --libs SOME CRAP -Wl,--hash-style=gnu -Wl,--as-needed -lkrb5 -lk5crypto -lcom_err Now : # CFLAGS="SOME CRAP" krb5-config --libs -Wl,--hash-style=gnu -Wl,--as-needed -lkrb5 -lk5crypto -lcom_err * Omit extra libraries because their interfaces are not exposed to applications by libkrb5, unless do_deps is set to 1, which indicates that the caller wants the whole list. # krb5-config --libs -Wl,--hash-style=gnu -Wl,--as-needed -lkrb5 -lk5crypto -lcom_err instead of # krb5-config --libs -Wl,--hash-style=gnu -Wl,--as-needed -lkrb5 -lk5crypto -lcom_err -lkeyutils - lresolv -ldl Please test and signoff Stéphane