there are specific checks for heimdahl libs in the config file in the --with-ads case which seem to be bogus to me.
They have the only side effect for importing the heimdahl libraries -lasn1 (ans so on) in front of the library path, overwriting the settings of --with-krb5=basedir.
In the case of MIT libraries in the --with-krb5 path and heimdahl on the system (for instance a suse90 system) this results with both libs in the smbd. There is no chance only to choose MIT Libs without removing the heimdahl-devel packages on such a system.
IMHO the only way of importing kerberos libraries should be the detection with krb5-config and an single fallback path should this not exist. The proposed patch does not enforce it, but it should be a step in this direction.
Created attachment 2192 [details]
Change to the configure.in