Could you explain the need for the krb5-mini buildrequire in a bit more detail please? AFAIK nothing in openldap2-client has a direct dependency on anything in krb5-mini. (Kerberos support in openldap is done via cyrus-sasl). Why does this cause a build cycle then?

Additionally openldap-client.spec is generated from openldap2.spec by pre_checkin.sh so you want to make any change in openldap2.spec and not in openldap2-client.spec. And run pre_checkin.sh manually afterwards. (BTW, moving the summary out of the %if will break that as well, how about fixing prepare_spec)

this is exactly the problem:

undecided about cyrus-sasl:libgssapi_krb5.so.2()(64bit): krb5 krb5-mini

And in general, the build service will prefer krb5 - rightfully. So we need to explicit buildrequire stuff that is in a cycle with krb5. If you know a different solution, fix it yourself ;(

And the spec files *are* generated by pre_checkin.sh, after all I patched the pre_checkin.sh to fix that.

Thanks for the explanation.