Problems my not be related to the way package is built. I have actually manage to compile smbk5pwd in lenny using instructions posted here (manually edited Makefile, haven't build package) but smbk5pwd that ships with lenny doesn't work with heimdal that ships with lenny. Look at http://news.gmane.org/find-root.php?message_id=%3c483AD6E8.1020902%40inria.fr%3e (thread "smbk5pwd crash for missing symbol" on network.openldap.general).
Guillaume Rousse on that thread posted a patch to smbk5pwd.c, and Love Hörnquist Åstrand made correction to that patch. Using those I have built smbk5pwd that actually works in lenny (well, for two day now, maybe needs more testing) without crushing slapd. I haven't seen those patches upstream in openldap, as a matter of facts ITS#5535 is still open on openldap issue tracking. If smbk5pwd is to be built as a package in lenny this or some other patch should be included.
