diff --git a/ci/cmake-preloads/config-android.txt b/ci/cmake-preloads/config-android.txt
index 6fdd639c3..644866c90 100644
--- a/ci/cmake-preloads/config-android.txt
+++ b/ci/cmake-preloads/config-android.txt
@@ -6,3 +6,4 @@ set(FREERDP_EXTERNAL_SSL_PATH $ENV{ANDROID_SSL_PATH} CACHE PATH "android ssl")
 #set(ANDROID_NDK $ENV{ANDROID_SDK} CACHE PATH "Android NDK")
 #set(ANDROID_SDK "${ANDROID_NDK}" CACHE PATH "android SDK")
 set (WITH_FREERDP_DEPRECATED_COMMANDLINE ON CACHE BOOL "Enable deprecated command line options")
+set (WITH_KRB5 OFF CACHE BOOL "Kerberos support")
diff --git a/ci/cmake-preloads/config-ios.txt b/ci/cmake-preloads/config-ios.txt
index 08145bb2c..fc6ee1f88 100644
--- a/ci/cmake-preloads/config-ios.txt
+++ b/ci/cmake-preloads/config-ios.txt
@@ -6,3 +6,4 @@ set (CMAKE_OSX_ARCHITECTURES "arm64" CACHE STRING "iOS platform to build")
 set (CMAKE_OSX_DEPLOYMENT_TARGET "10.0" CACHE STRING "iOS minimum target")
 set (WITH_SANITIZE_ADDRESS ON CACHE BOOL "build with address sanitizer")
 set (WITH_CLIENT OFF CACHE BOOL "disable iOS client")
+set (WITH_KRB5 OFF CACHE BOOL "Kerberos support")
diff --git a/ci/cmake-preloads/config-macosx.txt b/ci/cmake-preloads/config-macosx.txt
index 92195a15e..ff093c20e 100644
--- a/ci/cmake-preloads/config-macosx.txt
+++ b/ci/cmake-preloads/config-macosx.txt
@@ -7,3 +7,4 @@ set (WITH_X11 ON CACHE BOOL "Enable X11")
 set (BUILD_TESTING ON CACHE BOOL "build testing")
 set (WITH_SANITIZE_ADDRESS ON CACHE BOOL "build with address sanitizer")
 set (WITH_FREERDP_DEPRECATED_COMMANDLINE ON CACHE BOOL "Enable deprecated command line options")
+set (WITH_KRB5 OFF CACHE BOOL "Kerberos support")
diff --git a/winpr/CMakeLists.txt b/winpr/CMakeLists.txt
index 1424b5c6b..1c55ff8e8 100644
--- a/winpr/CMakeLists.txt
+++ b/winpr/CMakeLists.txt
@@ -67,7 +67,7 @@ option(WITH_DEBUG_MUTEX "Print mutex debug messages" ${DEFAULT_DEBUG_OPTION})
 option(WITH_INTERNAL_MD4 "Use compiled in md4 hash functions instead of OpenSSL/MBedTLS" OFF)
 option(WITH_INTERNAL_MD5 "Use compiled in md5 hash functions instead of OpenSSL/MBedTLS" OFF)
 
-if (NOT WIN32 AND NOT ANDROID AND NOT IOS AND NOT APPLE)
+if (NOT WIN32 AND NOT ANDROID AND NOT IOS)
 	option(WITH_KRB5 "Compile support for kerberos authentication. (EXPERIMENTAL)" OFF)
 	if (WITH_KRB5)
 		find_package(KRB5 REQUIRED)