diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/dev-libs/cyrus-sasl b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/dev-libs/cyrus-sasl
new file mode 100644
index 0000000000..f730ae0878
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/dev-libs/cyrus-sasl
@@ -0,0 +1,5 @@
+# Checking if a GSSAPI implementation supports SPNEGO feature involves
+# running a binary built during the configuration phase. This
+# obviously won't work in case of cross-compilation, so we state up
+# front that SPNEGO is supported.
+export ac_cv_gssapi_supports_spnego=yes