{ stdenv, fetchurl, openldap, readline, db4, openssl, cyrus_sasl }:

stdenv.mkDerivation rec {
  name = "heimdal-1.3.3";

  src = fetchurl {
    urls = [
      "http://www.h5l.org/dist/src/${name}.tar.gz"
      "http://ftp.pdc.kth.se/pub/heimdal/src/${name}.tar.gz"
    ];
    sha256 = "0c465by1g7niy3nkfs5mwrm6j6w2cvrf4988h3lpmj194lkjp3cc";
  };

  patches = [ ./no-md2.patch ];
  
  ## ugly, X should be made an option
  configureFlags = "--with-openldap=${openldap} --without-x";
  
  propagatedBuildInputs = [ readline db4 openssl openldap cyrus_sasl ];
}