Bug 83365 - <kadm5/admin.h> header-file missing
Summary: <kadm5/admin.h> header-file missing
Alias: None
Product: Red Hat Raw Hide
Classification: Retired
Component: krb5
Version: 1.0
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Nalin Dahyabhai
QA Contact: Brian Brock
Depends On:
Blocks: 79579 CambridgeTarget 144057
TreeView+ depends on / blocked
Reported: 2003-02-03 13:10 UTC by Enrico Scholz
Modified: 2007-04-18 16:50 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2006-08-08 13:29:51 UTC

Attachments (Terms of Use)

Description Enrico Scholz 2003-02-03 13:10:02 UTC
Description of problem:

The kadm5 headers are missing:

| $ cat foo.c
| #include <kadm5/admin.h>
| $ gcc `/usr/kerberos/bin/krb5-config --cflags  kadm-client` foo.c
| foo.c:1:25: kadm5/admin.h: No such file or directory

Including <kadm5/admin.h> is the way described by

Version-Release number of selected component (if applicable):


Comment 1 Julio Sanchez Fernandez 2003-03-13 17:50:09 UTC
This problem makes impossible compiling pam_krb5_migrate 0.0.4 that, BTW, would
be nice to have it included by RedHat.

I have verified that it these headers are missing on 7.3 (released an errata),
8.0, Phoebe and current Rawhide (that seems to be krb5-devel-1.2.7-7)

Comment 2 Julio Sanchez Fernandez 2003-05-27 09:55:34 UTC
I have rechecked and they are still missing from both RedHat Linux 9 and the
current rawhide, even though the package has been updated on rawhide on May 22nd.

Would filing a new bug against RedHat Linux 9 improve the chances of this being

Comment 3 Gerasimos Melissaratos 2003-07-31 07:22:54 UTC
This bug is due to the usage of MIT Kerberos V instead of Heimdal Kerberos V in  
RedHat. Download from ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.6.tar.gz, 
extract, run configure with a prefix like  
"./configure --prefix=/usr/local/heimdal" 
then "make install". 
Next step is to fix the pam_krb5_migrate Makefile and "pam_krb5_migrate.h" header 
file. Change in the Makefile the line  
"CFLAGS += -I/usr/kerberos/include" 
"CFLAGS += -I/usr/local/heimdal/include" 
Then edit the header file and add under the last #include statement the line 
#include <kadm5/kadm5_err.h> 
Run "make all install" for the pam module and everything should run smoothly. You 
can remove the directory /usr/local/heimdal after that. It's not the best of fixes, but it 

Comment 4 Julio Sanchez Fernandez 2003-08-01 08:01:57 UTC
I don't think it is a Heimdal vs. MIT problem, older versions of the MIT RPMS
included that file.

Comment 5 Chris Ricker 2003-11-07 03:50:14 UTC
It's definitely not Heimdal vs MIT. The stock MIT krb5 1.3.1 source
tree includes src/lib/kadm5/admin.h ; not sure why it's not included....

Comment 6 Enrico Scholz 2004-01-14 16:13:37 UTC
still with krb5-devel-1.3.1-7

Comment 7 Enrico Scholz 2004-01-14 19:12:56 UTC
When you want a quick hack, please consider to do QA on


Comment 8 Miloslav Trmač 2005-01-10 22:19:18 UTC
This also makes it impossible to resurrect the krb5
support in libuser.

Comment 9 Bill Nottingham 2006-08-08 01:53:27 UTC
'Red Hat Raw Hide' refers to the development tree for Red Hat Linux.
Red Hat Linux is no longer supported by Red Hat, Inc. If you are still
running Red Hat Linux, you are strongly advised to upgrade to a
current Fedora Core release or Red Hat Enterprise Linux or comparable.
Some information on which option may be right for you is available at

Red Hat apologizes that these issues were not resolved in a more
timely manner. However, we do want to make sure that important 
don't slip through the cracks. If these issues are still present
in a current release, such as Fedora Core 5, please move these
bugs to that product and version. Note that any remaining Red Hat
Raw Hide bugs will be closed as 'CANTFIX' on September 30, 2006.
Thanks again for your help.

Comment 10 Nalin Dahyabhai 2006-08-08 13:29:51 UTC
The kadmin library is internal to MIT Kerberos and isn't part of the ABI which
upstream attempts to maintain.  Including it in the original RHL packages was a
mistake on my part.  Marking won't-fix.

Comment 11 Aleksandar Milivojevic 2006-11-28 19:59:12 UTC
Internal to MIT Kerberos or not, there's so much stuff out there that uses
kadmin library that it would be useful to have it back.  For example the only
PHP kerberos extension (kadm5) I know of needs those include files to compile.

I'm perfectly fine if it's in separate subpackage with string "unsupported" or
whatever in the name.  As long as I have freedom to take a risk and install it.

Note You need to log in before you can comment on or make changes to this bug.