Description of problem:
The kadm5 headers are missing:
| $ cat foo.c
| #include <kadm5/admin.h>
| $ gcc `/usr/kerberos/bin/krb5-config --cflags kadm-client` foo.c
| foo.c:1:25: kadm5/admin.h: No such file or directory
Including <kadm5/admin.h> is the way described by
Version-Release number of selected component (if applicable):
This problem makes impossible compiling pam_krb5_migrate 0.0.4 that, BTW, would
be nice to have it included by RedHat.
I have verified that it these headers are missing on 7.3 (released an errata),
8.0, Phoebe and current Rawhide (that seems to be krb5-devel-1.2.7-7)
I have rechecked and they are still missing from both RedHat Linux 9 and the
current rawhide, even though the package has been updated on rawhide on May 22nd.
Would filing a new bug against RedHat Linux 9 improve the chances of this being
This bug is due to the usage of MIT Kerberos V instead of Heimdal Kerberos V in
RedHat. Download from ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.6.tar.gz,
extract, run configure with a prefix like
then "make install".
Next step is to fix the pam_krb5_migrate Makefile and "pam_krb5_migrate.h" header
file. Change in the Makefile the line
"CFLAGS += -I/usr/kerberos/include"
"CFLAGS += -I/usr/local/heimdal/include"
Then edit the header file and add under the last #include statement the line
Run "make all install" for the pam module and everything should run smoothly. You
can remove the directory /usr/local/heimdal after that. It's not the best of fixes, but it
I don't think it is a Heimdal vs. MIT problem, older versions of the MIT RPMS
included that file.
It's definitely not Heimdal vs MIT. The stock MIT krb5 1.3.1 source
tree includes src/lib/kadm5/admin.h ; not sure why it's not included....
still with krb5-devel-1.3.1-7
When you want a quick hack, please consider to do QA on
This also makes it impossible to resurrect the krb5
support in libuser.
'Red Hat Raw Hide' refers to the development tree for Red Hat Linux.
Red Hat Linux is no longer supported by Red Hat, Inc. If you are still
running Red Hat Linux, you are strongly advised to upgrade to a
current Fedora Core release or Red Hat Enterprise Linux or comparable.
Some information on which option may be right for you is available at
Red Hat apologizes that these issues were not resolved in a more
timely manner. However, we do want to make sure that important
don't slip through the cracks. If these issues are still present
in a current release, such as Fedora Core 5, please move these
bugs to that product and version. Note that any remaining Red Hat
Raw Hide bugs will be closed as 'CANTFIX' on September 30, 2006.
Thanks again for your help.
The kadmin library is internal to MIT Kerberos and isn't part of the ABI which
upstream attempts to maintain. Including it in the original RHL packages was a
mistake on my part. Marking won't-fix.
Internal to MIT Kerberos or not, there's so much stuff out there that uses
kadmin library that it would be useful to have it back. For example the only
PHP kerberos extension (kadm5) I know of needs those include files to compile.
I'm perfectly fine if it's in separate subpackage with string "unsupported" or
whatever in the name. As long as I have freedom to take a risk and install it.