I am trying to make the smbk5pwd module manage password syncing with Samba and Kerberos.  I am running on Ubuntu Server 8.10 with openldap-2.4.11 and heimdal 1.1.

I can "make" the smbk5pwd module, but when I run a password change using it, I recieve the following error:

conn=0 op=1 PASSMOD id="uid=sgrizzard,ou=Users,dc=scottgrizzard,dc=com" new
>>> dnPrettyNormal: <uid=sgrizzard,ou=Users,dc=scottgrizzard,dc=com>
=> ldap_bv2dn(uid=sgrizzard,ou=Users,dc=scottgrizzard,dc=com,0)
<= ldap_bv2dn(uid=sgrizzard,ou=Users,dc=scottgrizzard,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=sgrizzard,ou=Users,dc=scottgrizzard,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=sgrizzard,ou=users,dc=scottgrizzard,dc=com)=0
<<< dnPrettyNormal: <uid=sgrizzard,ou=Users,dc=scottgrizzard,dc=com>, <uid=sgrizzard,ou=users,dc=scottgrizzard,dc=com>
bdb_dn2entry("uid=sgrizzard,ou=users,dc=scottgrizzard,dc=com")
=> hdb_dn2id("dc=scottgrizzard,dc=com")
<= hdb_dn2id: got id=0x1
=> hdb_dn2id("ou=users,dc=scottgrizzard,dc=com")
<= hdb_dn2id: got id=0x4
=> hdb_dn2id("uid=sgrizzard,ou=users,dc=scottgrizzard,dc=com")
<= hdb_dn2id: got id=0x22
entry_decode: ""
<= entry_decode()
=> bdb_entry_get: ndn: "uid=sgrizzard,ou=users,dc=scottgrizzard,dc=com"
=> bdb_entry_get: oc: "(null)", at: "(null)"
bdb_dn2entry("uid=sgrizzard,ou=users,dc=scottgrizzard,dc=com")
=> bdb_entry_get: found entry: "uid=sgrizzard,ou=users,dc=scottgrizzard,dc=com"
bdb_entry_get: rc=0
slapd: symbol lookup error: /usr/lib/ldap/smbk5pwd.so.0: undefined symbol: _kadm5_set_keys

My Makefile:
# $OpenLDAP: pkg/ldap/contrib/slapd-modules/smbk5pwd/Makefile,v 1.1 2004/04/02 11:06:38 hyc Exp $
# Copyright 2004 Howard Chu, Symas Corp. All Rights Reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted only as authorized by the OpenLDAP
# Public License.
#
# A copy of this license is available in the file LICENSE in the
# top-level directory of the distribution or, alternatively, at
# <http://www.OpenLDAP.org/license.html>.

LIBTOOL=../../../libtool
#LIBTOOL=/usr/bin/libtool
OPT=-g -O2
CC=gcc

# Omit DO_KRB5 or DO_SAMBA if you don't want to support it.
DEFS=-DDO_KRB5 -DDO_SAMBA

#HEIMDAL_INC=-I/usr/heimdal/include
HEIMDAL_INC=-I/usr/include
SSL_INC=
LDAP_INC=-I../../../include -I../../../servers/slapd
INCS=$(LDAP_INC) $(HEIMDAL_INC) $(SSL_INC)

#HEIMDAL_LIB=-L/usr/heimdal/lib -lkrb5 -lkadm5srv
HEIMDAL_LIB=-L/usr/lib -lkrb5 -lkadm5srv
SSL_LIB=-lcrypto
LDAP_LIB=-lldap_r -llber
LIBS=$(LDAP_LIB) $(HEIMDAL_LIB) $(SSL_LIB)

all:    smbk5pwd.la


smbk5pwd.lo:    smbk5pwd.c
        $(LIBTOOL) --mode=compile $(CC) $(OPT) $(DEFS) $(INCS) -c $?

smbk5pwd.la:    smbk5pwd.lo
        $(LIBTOOL) --mode=link $(CC) $(OPT) -version-info 0:0:0 \
        -rpath /usr/lib/ldap -module -o $@ $? $(LIBS)

I've messed with this thing for quite a while now, but nothing seems to be working.  Any ideas?

- Scott Grizzard