--libexecdir=/usr/sbin: This switch puts the daemon programs into /usr/sbin. If you want to preserve all your existing Inetutils package daemons, install the Heimdal daemons into /usr/sbin/heimdal (or wherever you want). Since these programs will be called from (x)inetd or rc scripts, it really doesn't matter where they live, as long as they are correctly specified in the /etc/(x)inetd.conf file and rc scripts. If you choose something other than /usr/sbin, you may want to move some of the user programs (such as kadmin) to /usr/sbin manually. mv /bin/login /bin/login.shadow mv /bin/su /bin/su.coreutils mv /usr/bin/{login,su} /bin ln -sf ../../bin/login /usr/bin The login and su programs installed by Heimdal belong in /bin directory. The login program is symlinked because Heimdal is expecting to find it in /usr/bin. We preserve the old executables before the move to keep things sane should breaks occur. mv /usr/lib/lib{otp.so.0,otp.so.0.1.4,kafs.so.0,kafs.so.0.4.0} /lib mv /usr/lib/lib{krb5.so.17,krb5.so.17.3.0,asn1.so.6,asn1.so.6.0.2} /lib mv /usr/lib/lib{roken.so.16,roken.so.16.0.3,crypto.so.0.9.7} /lib mv /usr/lib/lib{com_err.so.1,com_err.so.1.1.1,db-4.1.so} /lib ln -sf ../../lib/lib{otp.so.0,otp.so.0.1.4,kafs.so.0,kafs.so.0.4.0} /usr/lib ln -sf ../../lib/lib{krb5.so.17,krb5.so.17.3.0,asn1.so.6,asn1.so.6.0.2} /usr/lib ln -sf ../../lib/lib{roken.so.16,roken.so.16.0.3,crypto.so.0.9.7} /usr/lib ln -sf ../../lib/lib{com_err.so.1,com_err.so.1.1.1,db-4.1.so} /usr/lib The login and su programs installed by Heimdal link against Heimdal libraries as well as crypto and db libraries. We move these libraries to /lib to be FHS compliant and in case when the /usr is located on separate partition which may not be always mounted.