This patch rips out code that tries to add "/admin" to your principal name while running kadmin. Need to check with upstream whether this is the correct way to fix it. Author: Igor Yanover --- heimdal-0.7.2/lib/kadm5/init_c.c.orig 2006-12-06 12:41:27.000000000 +0200 +++ heimdal-0.7.2/lib/kadm5/init_c.c 2006-12-06 12:41:51.000000000 +0200 @@ -265,19 +265,6 @@ default_client, 0); inst = krb5_principal_get_comp_string(context, default_client, 1); - if(inst == NULL || strcmp(inst, "admin") != 0) { - ret = krb5_make_principal(context, &tmp, NULL, - name, "admin", NULL); - if(ret != 0) { - krb5_free_principal(context, default_client); - krb5_cc_close(context, id); - return ret; - } - krb5_free_principal(context, default_client); - default_client = tmp; - krb5_cc_close(context, id); - id = NULL; - } } }