the code in configure.ac that handles kerberos support will still check for some kerberos features even if the user specifies --without-kerberos5 this is because some of the AC macros are outside of the 'if test "x$withval" != "xno" ; then' code
Created attachment 953 [details] openssh-without-krb5.patch
Fix commited to CVS Thanks for the report
Change all RESOLVED bug to CLOSED with the exception of the ones fixed post-4.4.