Hi. Here's the rationale behind the krb5-kdc krb5-kadmin-server split. The krb5-kdc package includes the things you'd need on a traditional slave KDC. One of the key things about a slave KDC is that the database is read-only. The slave is not making any changes to the database, locally or otherwise. So, kadmin.local does not belong on a slave KDC. However krb5-admin-server includes the stuff you need for a master KDC: local administration tools, the admin server, etc. I'd be interested in documentation/description suggestions if this could be made more clear.
However, I would not support changing the binary location in Debian. ** Changed in: krb5 (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1363980 Title: kadmin.local in wrong package Status in “krb5” package in Ubuntu: Invalid Bug description: Hi, in contrast to /usr/bin/kadmin, /usr/bin/kadmin.local does not use the server, but accesses the database directly. It does not use the krb5-admin-server. It therefore should not be packed into the krb5-admin-server, but in the krb5-kdc package, to allow using it without/before installing the admin server. Doesn't make sense to put a program designed to be independent from admin-server in the package with admin-server. regards Hadmut ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: krb5-admin-server 1.12+dfsg-2ubuntu4.2 ProcVersionSignature: Ubuntu 3.13.0-34.60-generic 3.13.11.4 Uname: Linux 3.13.0-34-generic x86_64 NonfreeKernelModules: zfs zunicode zavl zcommon znvpair ApportVersion: 2.14.1-0ubuntu3.3 Architecture: amd64 CurrentDesktop: XFCE Date: Mon Sep 1 14:18:26 2014 SourcePackage: krb5 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1363980/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp