Looks like samba 4.16.4 is not ready to be used with new krb5 1.20

[3072/4002] Compiling source4/kdc/mit_samba.c
10:10:42 runner ['/usr/bin/gcc', '-D_SAMBA_BUILD_=4', '-DHAVE_CONFIG_H=1', '-O2', '-g', '-grecord-gcc-switches', '-pipe', '-Wall', '-Werror=format-security', '-Wp,-D_FORTIFY_SOURCE=2', '-Wp,-D_GLIBCXX_ASSERTIONS', '-specs=/usr/lib/rpm/redhat/redhat-hardened-cc1', '-fstack-protector-strong', '-specs=/usr/lib/rpm/redhat/redhat-annobin-cc1', '-m64', '-mtune=generic', '-fasynchronous-unwind-tables', '-fstack-clash-protection', '-fcf-protection', '-fdata-sections', '-ffunction-sections', '-flto=auto', '-flto-partition=none', '-Wno-error=format-security', '-MMD', '-D_GNU_SOURCE=1', '-D_XOPEN_SOURCE_EXTENDED=1', '-DHAVE_CONFIG_H=1', '-fPIC', '-D__STDC_WANT_LIB_EXT1__=1', '-D_REENTRANT', '-DCTDB_HELPER_BINDIR="/usr/libexec/ctdb"', '-DLOGDIR="/usr/var/log"', '-DCTDB_DATADIR="/usr/share/ctdb"', '-DCTDB_ETCDIR="/etc/ctdb"', '-DCTDB_VARDIR="/usr/var/lib/ctdb"', '-DCTDB_RUNDIR="/usr/var/run/ctdb"', '-fstack-protector-strong', '-fstack-clash-protection', '-DSTATIC_MIT_SAMBA_MODULES=NULL', '-DSTATIC_MIT_SAMBA_MODULES_PROTO=extern void __MIT_SAMBA_dummy_module_proto(void)', '-Isource4/kdc', '-I../../source4/kdc', '-Iinclude/public', '-I../../include/public', '-Isource4', '-I../../source4', '-Ilib', '-I../../lib', '-Isource4/lib', '-I../../source4/lib', '-Isource4/include', '-I../../source4/include', '-Iinclude', '-I../../include', '-Ilib/replace', '-I../../lib/replace', '-Ictdb/include', '-I../../ctdb/include', '-Ictdb', '-I../../ctdb', '-I.', '-I../..', '-Ilibrpc', '-I../../librpc', '-Ilib/util/home/tkloczko/rpmbuild/BUILD/samba-4.16.4/third_party/gpfs', '-I../../lib/util/home/tkloczko/rpmbuild/BUILD/samba-4.16.4/third_party/gpfs', '-Ilibcli/auth', '-I../../libcli/auth', '-Idynconfig', '-I../../dynconfig', '-Ilibcli/nbt', '-I../../libcli/nbt', '-Isource4/libcli', '-I../../source4/libcli', '-Isource4/librpc', '-I../../source4/librpc', '-Ilibcli/dns', '-I../../libcli/dns', '-Ilibcli/lsarpc', '-I../../libcli/lsarpc', '-Isource4/libcli/ldap', '-I../../source4/libcli/ldap', '-Isource4/lib/socket', '-I../../source4/lib/socket', '-Ilibcli/util', '-I../../libcli/util', '-Isource4/lib/messaging', '-I../../source4/lib/messaging', '-Isource4/dsdb', '-I../../source4/dsdb', '-Isource4/lib/tls', '-I../../source4/lib/tls', '-Ilibds/common', '-I../../libds/common', '-Iauth/credentials', '-I../../auth/credentials', '-Iauth/gensec', '-I../../auth/gensec', '-Ilib/param', '-I../../lib/param', '-Isource3', '-I../../source3', '-Isource3/include', '-I../../source3/include', '-Isource3/lib', '-I../../source3/lib', '-Isource3/librpc', '-I../../source3/librpc', '-Ilib/krb5_wrap', '-I../../lib/krb5_wrap', '-Ilibcli/smb', '-I../../libcli/smb', '-Insswitch/libwbclient', '-I../../nsswitch/libwbclient', '-Isource4/lib/events', '-I../../source4/lib/events', '-Ilibcli/ldap', '-I../../libcli/ldap', '-Isource4/auth/kerberos', '-I../../source4/auth/kerberos', '-Isource4/param', '-I../../source4/param', '-Ilib/addns', '-I../../lib/addns', '-Ilibcli/netlogon', '-I../../libcli/netlogon', '-Iauth', '-I../../auth', '-Ilib/util/charset', '-I../../lib/util/charset', '-Ilib/messaging', '-I../../lib/messaging', '-Iauth/kerberos', '-I../../auth/kerberos', '-Ilib/ldb-samba', '-I../../lib/ldb-samba', '-Isource4/auth/gensec', '-I../../source4/auth/gensec', '-Ilib/tsocket', '-I../../lib/tsocket', '-Ilibcli/http', '-I../../libcli/http', '-Ilib/audit_logging', '-I../../lib/audit_logging', '-Isource4/libcli/smb2', '-I../../source4/libcli/smb2', '-Ilib/async_req', '-I../../lib/async_req', '-Ilib/dbwrap', '-I../../lib/dbwrap', '-Ilibcli/security', '-I../../libcli/security', '-Ilib/pthreadpool', '-I../../lib/pthreadpool', '-Ilibcli/cldap', '-I../../libcli/cldap', '-Ilibcli/drsuapi', '-I../../libcli/drsuapi', '-Ilib/socket', '-I../../lib/socket', '-Ilib/crypto', '-I../../lib/crypto', '-Iauth/ntlmssp', '-I../../auth/ntlmssp', '-Isource4/auth', '-I../../source4/auth', '-Isource4/cluster', '-I../../source4/cluster', '-Isource4/lib/stream', '-I../../source4/lib/stream', '-Ilib/compression', '-I../../lib/compression', '../../source4/kdc/mit_samba.c', '-c', '-o/home/tkloczko/rpmbuild/BUILD/samba-4.16.4/bin/default/source4/kdc/mit_samba.c.19.o']
../../source4/kdc/mit_samba.c: In function ‘mit_samba_context_init’:
../../source4/kdc/mit_samba.c:93:9: warning: ‘tevent_loop_allow_nesting’ is deprecated [-Wdeprecated-declarations]
   93 |         tevent_loop_allow_nesting(base_ctx.ev_ctx);
      |         ^~~~~~~~~~~~~~~~~~~~~~~~~
In file included from /usr/include/ldb.h:51,
                 from ../../source4/dsdb/samdb/samdb.h:35,
                 from ../../source4/kdc/mit_samba.c:26:
/usr/include/tevent.h:2354:6: note: declared here
 2354 | void tevent_loop_allow_nesting(struct tevent_context *ev) _DEPRECATED_;
      |      ^~~~~~~~~~~~~~~~~~~~~~~~~
../../source4/kdc/mit_samba.c: In function ‘mit_samba_get_principal’:
../../source4/kdc/mit_samba.c:232:22: error: ‘KRB5_KDB_FLAG_CANONICALIZE’ undeclared (first use in this function); did you mean ‘KRB5_GC_CANONICALIZE’?
  232 |         if (kflags & KRB5_KDB_FLAG_CANONICALIZE) {
      |                      ^~~~~~~~~~~~~~~~~~~~~~~~~~
      |                      KRB5_GC_CANONICALIZE
../../source4/kdc/mit_samba.c:232:22: note: each undeclared identifier is reported only once for each function it appears in
../../source4/kdc/mit_samba.c:235:23: error: ‘KRB5_KDB_FLAG_CLIENT_REFERRALS_ONLY’ undeclared (first use in this function); did you mean ‘KRB5_KDB_FLAG_REFERRAL_OK’?
  235 |         if (kflags & (KRB5_KDB_FLAG_CLIENT_REFERRALS_ONLY |
      |                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      |                       KRB5_KDB_FLAG_REFERRAL_OK
../../source4/kdc/mit_samba.c:236:23: error: ‘KRB5_KDB_FLAG_INCLUDE_PAC’ undeclared (first use in this function); did you mean ‘KRB5_KDB_FLAG_CLIENT’?
  236 |                       KRB5_KDB_FLAG_INCLUDE_PAC)) {
      |                       ^~~~~~~~~~~~~~~~~~~~~~~~~
      |                       KRB5_KDB_FLAG_CLIENT

* Node /home/tkloczko/rpmbuild/BUILD/samba-4.16.4/bin/default/source3/rpc_server/mdssvc/es_parser.tab.c is created more than once (full message on 'waf -v -v'). The task generators are:
  1. 'test_mdsparser_es.objlist' in /home/tkloczko/rpmbuild/BUILD/samba-4.16.4/source3
  2. 'spotlight2es.objlist' in /home/tkloczko/rpmbuild/BUILD/samba-4.16.4/source3
  3. 'rpcd_mdssvc.objlist' in /home/tkloczko/rpmbuild/BUILD/samba-4.16.4/source3/rpc_server
If you think that this is an error, set no_errcheck_out on the task instance
* Node /home/tkloczko/rpmbuild/BUILD/samba-4.16.4/bin/default/source3/rpc_server/mdssvc/es_parser.tab.h is created more than once (full message on 'waf -v -v'). The task generators are:
  1. 'test_mdsparser_es.objlist' in /home/tkloczko/rpmbuild/BUILD/samba-4.16.4/source3
  2. 'spotlight2es.objlist' in /home/tkloczko/rpmbuild/BUILD/samba-4.16.4/source3
  3. 'rpcd_mdssvc.objlist' in /home/tkloczko/rpmbuild/BUILD/samba-4.16.4/source3/rpc_server
If you think that this is an error, set no_errcheck_out on the task instance
* Node /home/tkloczko/rpmbuild/BUILD/samba-4.16.4/bin/default/source3/rpc_server/mdssvc/es_lexer.lex.c is created more than once (full message on 'waf -v -v'). The task generators are:
  1. 'test_mdsparser_es.objlist' in /home/tkloczko/rpmbuild/BUILD/samba-4.16.4/source3
  2. 'spotlight2es.objlist' in /home/tkloczko/rpmbuild/BUILD/samba-4.16.4/source3
  3. 'rpcd_mdssvc.objlist' in /home/tkloczko/rpmbuild/BUILD/samba-4.16.4/source3/rpc_server
If you think that this is an error, set no_errcheck_out on the task instance
Waf: Leaving directory `/home/tkloczko/rpmbuild/BUILD/samba-4.16.4/bin/default'
Build failed
 -> task in 'MIT_SAMBA' failed with exit status 1:
        {task 140433466217632: c mit_samba.c -> mit_samba.c.19.o}
['/usr/bin/gcc', '-D_SAMBA_BUILD_=4', '-DHAVE_CONFIG_H=1', '-O2', '-g', '-grecord-gcc-switches', '-pipe', '-Wall', '-Werror=format-security', '-Wp,-D_FORTIFY_SOURCE=2', '-Wp,-D_GLIBCXX_ASSERTIONS', '-specs=/usr/lib/rpm/redhat/redhat-hardened-cc1', '-fstack-protector-strong', '-specs=/usr/lib/rpm/redhat/redhat-annobin-cc1', '-m64', '-mtune=generic', '-fasynchronous-unwind-tables', '-fstack-clash-protection', '-fcf-protection', '-fdata-sections', '-ffunction-sections', '-flto=auto', '-flto-partition=none', '-Wno-error=format-security', '-MMD', '-D_GNU_SOURCE=1', '-D_XOPEN_SOURCE_EXTENDED=1', '-DHAVE_CONFIG_H=1', '-fPIC', '-D__STDC_WANT_LIB_EXT1__=1', '-D_REENTRANT', '-DCTDB_HELPER_BINDIR="/usr/libexec/ctdb"', '-DLOGDIR="/usr/var/log"', '-DCTDB_DATADIR="/usr/share/ctdb"', '-DCTDB_ETCDIR="/etc/ctdb"', '-DCTDB_VARDIR="/usr/var/lib/ctdb"', '-DCTDB_RUNDIR="/usr/var/run/ctdb"', '-fstack-protector-strong', '-fstack-clash-protection', '-DSTATIC_MIT_SAMBA_MODULES=NULL', '-DSTATIC_MIT_SAMBA_MODULES_PROTO=extern void __MIT_SAMBA_dummy_module_proto(void)', '-Isource4/kdc', '-I../../source4/kdc', '-Iinclude/public', '-I../../include/public', '-Isource4', '-I../../source4', '-Ilib', '-I../../lib', '-Isource4/lib', '-I../../source4/lib', '-Isource4/include', '-I../../source4/include', '-Iinclude', '-I../../include', '-Ilib/replace', '-I../../lib/replace', '-Ictdb/include', '-I../../ctdb/include', '-Ictdb', '-I../../ctdb', '-I.', '-I../..', '-Ilibrpc', '-I../../librpc', '-Ilib/util/home/tkloczko/rpmbuild/BUILD/samba-4.16.4/third_party/gpfs', '-I../../lib/util/home/tkloczko/rpmbuild/BUILD/samba-4.16.4/third_party/gpfs', '-Ilibcli/auth', '-I../../libcli/auth', '-Idynconfig', '-I../../dynconfig', '-Ilibcli/nbt', '-I../../libcli/nbt', '-Isource4/libcli', '-I../../source4/libcli', '-Isource4/librpc', '-I../../source4/librpc', '-Ilibcli/dns', '-I../../libcli/dns', '-Ilibcli/lsarpc', '-I../../libcli/lsarpc', '-Isource4/libcli/ldap', '-I../../source4/libcli/ldap', '-Isource4/lib/socket', '-I../../source4/lib/socket', '-Ilibcli/util', '-I../../libcli/util', '-Isource4/lib/messaging', '-I../../source4/lib/messaging', '-Isource4/dsdb', '-I../../source4/dsdb', '-Isource4/lib/tls', '-I../../source4/lib/tls', '-Ilibds/common', '-I../../libds/common', '-Iauth/credentials', '-I../../auth/credentials', '-Iauth/gensec', '-I../../auth/gensec', '-Ilib/param', '-I../../lib/param', '-Isource3', '-I../../source3', '-Isource3/include', '-I../../source3/include', '-Isource3/lib', '-I../../source3/lib', '-Isource3/librpc', '-I../../source3/librpc', '-Ilib/krb5_wrap', '-I../../lib/krb5_wrap', '-Ilibcli/smb', '-I../../libcli/smb', '-Insswitch/libwbclient', '-I../../nsswitch/libwbclient', '-Isource4/lib/events', '-I../../source4/lib/events', '-Ilibcli/ldap', '-I../../libcli/ldap', '-Isource4/auth/kerberos', '-I../../source4/auth/kerberos', '-Isource4/param', '-I../../source4/param', '-Ilib/addns', '-I../../lib/addns', '-Ilibcli/netlogon', '-I../../libcli/netlogon', '-Iauth', '-I../../auth', '-Ilib/util/charset', '-I../../lib/util/charset', '-Ilib/messaging', '-I../../lib/messaging', '-Iauth/kerberos', '-I../../auth/kerberos', '-Ilib/ldb-samba', '-I../../lib/ldb-samba', '-Isource4/auth/gensec', '-I../../source4/auth/gensec', '-Ilib/tsocket', '-I../../lib/tsocket', '-Ilibcli/http', '-I../../libcli/http', '-Ilib/audit_logging', '-I../../lib/audit_logging', '-Isource4/libcli/smb2', '-I../../source4/libcli/smb2', '-Ilib/async_req', '-I../../lib/async_req', '-Ilib/dbwrap', '-I../../lib/dbwrap', '-Ilibcli/security', '-I../../libcli/security', '-Ilib/pthreadpool', '-I../../lib/pthreadpool', '-Ilibcli/cldap', '-I../../libcli/cldap', '-Ilibcli/drsuapi', '-I../../libcli/drsuapi', '-Ilib/socket', '-I../../lib/socket', '-Ilib/crypto', '-I../../lib/crypto', '-Iauth/ntlmssp', '-I../../auth/ntlmssp', '-Isource4/auth', '-I../../source4/auth', '-Isource4/cluster', '-I../../source4/cluster', '-Isource4/lib/stream', '-I../../source4/lib/stream', '-Ilib/compression', '-I../../lib/compression', '../../source4/kdc/mit_samba.c', '-c', '-o/home/tkloczko/rpmbuild/BUILD/samba-4.16.4/bin/default/source4/kdc/mit_samba.c.19.o']
make: *** [Makefile:7: all] Error 1