Hi, there are specific checks for heimdahl libs in the config file in the --with-ads case which seem to be bogus to me. They have the only side effect for importing the heimdahl libraries -lasn1 (ans so on) in front of the library path, overwriting the settings of --with-krb5=basedir. In the case of MIT libraries in the --with-krb5 path and heimdahl on the system (for instance a suse90 system) this results with both libs in the smbd. There is no chance only to choose MIT Libs without removing the heimdahl-devel packages on such a system. IMHO the only way of importing kerberos libraries should be the detection with krb5-config and an single fallback path should this not exist. The proposed patch does not enforce it, but it should be a step in this direction.
Created attachment 2192 [details] Change to the configure.in
The new waf build system is tested with Heimdal and MIT system libraries, and brings in the right libraries as far as we know, and specifically avoids bringing in both. Marking as fixed since roughly the Samba 4.0 release (not sure which one exactly).