--- src/auth/negotiate/kerberos/negotiate_kerberos.h.orig	2015-08-01 06:08:17 UTC
+++ src/auth/negotiate/kerberos/negotiate_kerberos.h
@@ -140,7 +140,7 @@ int check_gss_err(OM_uint32 major_status
 
 char *gethost_name(void);
 
-#if (HAVE_GSSKRB5_EXTRACT_AUTHZ_DATA_FROM_SEC_CONTEXT || HAVE_GSS_MAP_NAME_TO_ANY) && HAVE_KRB5_PAC
+#if (HAVE_GSSKRB5_EXTRACT_AUTHZ_DATA_FROM_SEC_CONTEXT || HAVE_GSS_MAP_NAME_TO_ANY) && HAVE_KRB5_PAC && __FreeBSD__ >= 10
 #define HAVE_PAC_SUPPORT 1
 #define MAX_PAC_GROUP_SIZE 200*60
 typedef struct {