configuring libkadm5clnt_mit/libkadm5 for NIS password migration in Fedora

Robert Kudyba rkudyba at
Mon Nov 9 16:45:35 EST 2020

I posted a few weeks back about migrating our NIS user passwords and
the response
I got was
"In Fedora, is provided by libkadm5. Please be aware
that neither I (Fedora maintainer) do not support external programs using
the libkadm5 interface."

I'm trying to determine how to configure PAM to get this password migration
library to work. I posted on Reddit
to no avail.

What needs to go in /etc/authselect/password-auth and/or
/etc/authselect/system-auth? I tried putting:
auth optional expire_pw

But I get this error:

debug1: PAM: initializing for "myuser" PAM unable to resolve symbol:
pam_sm_authenticate PAM unable to resolve symbol: pam_sm_setcred

Any guidance would be greatly appreciated.



More information about the Kerberos mailing list