It is actually possible to build the smb5passwd overlay without heimdal: I used this in a project with a Samba PDC where I needed smb-passwd synchronization without kerberos. Can haz this pleaze?
Patches welcome
InCVS in 2.4.40