Index: net/nss_ldap/Makefile
===================================================================
--- net/nss_ldap/Makefile       (revision 414342)
+++ net/nss_ldap/Makefile       (working copy)
@@ -24,13 +24,29 @@
 USE_LDCONFIG=  yes
 USE_OPENLDAP=  yes
 
-OPTIONS_DEFINE=        LCLASS KERBEROS SASL
-OPTIONS_DEFAULT=LCLASS KERBEROS
+OPTIONS_DEFINE=        LCLASS SASL
 
+OPTIONS_RADIO= KERBEROS
+OPTIONS_RADIO_KERBEROS= SYSTEMKRB MIT HEIMDAL
+
+OPTIONS_DEFAULT=LCLASS SYSTEMKRB
+
+MIT_RUN_DEPENDS= ${LOCALBASE}/lib/libkrb5.so:${PORTSDIR}/security/krb5
+HEIMDAL_RUN_DEPENDS= ${LOCALBASE}/lib/heimdal/libkrb5.so:${PORTSDIR}/security/heimdal
+
+MIT_BUILD_DEPENDS= ${LOCALBASE}/lib/libkrb5.so:${PORTSDIR}/security/krb5
+HEIMDAL_BUILD_DEPENDS= ${LOCALBASE}/lib/heimdal/libkrb5.so:${PORTSDIR}/security/heimdal
+
+HEIMDAL_LDFLAGS= -L${LOCALBASE}/lib/heimdal
+
 LCLASS_DESC=   Enable login classes via the loginClass attribute
 
 SASL_DESC=     Use the SASL-enabled version of OpenLDAP
 
+SYSTEMKRB_DESC=        Use Kerberos version shipped with FreeBSD
+MIT_DESC=      Use MIT-Kerberos port
+HEIMDAL_DESC=  Use HEIMDAL-Kerberos port
+
 CPPFLAGS+=     -I${LOCALBASE}/include
 LDFLAGS+=      -L${LOCALBASE}/lib -Wl,-rpath,${LOCALBASE}/lib
 
@@ -43,7 +59,8 @@
 
 .include <bsd.port.options.mk>
 
-.if ${PORT_OPTIONS:MKERBEROS}
+
+.if ${PORT_OPTIONS:MSYSTEMKRB} || ${PORT_OPTIONS:MMIT} || ${PORT_OPTIONS:MHEIMDAL}
 CONFIGURE_ARGS+=--enable-configurable-krb5-ccname-gssapi \
                --enable-configurable-krb5-keytab
 .endif