Users cannot change kerberos passwords

[Jason L Tibbitts III]

I'm having a problem with kerberos: users can authenticate and obtain
tickets, and under RH9 they can change their passwords.  But using an
identically-configured machine running any version 2.x of pam_krb5
including the versions from FC1, FC2 and the latest from Rawhide
(2.1.1-1), the passwd command just exits:

> passwd
Changing password for user tibbs.
passwd: Authentication token manipulation error

Has anyone seen this before?  I have filed bug 130950 for this:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=130950

but I'm getting kind of desperate and hope that someone in the
community might have seen this before.  I did try to build and use the
pam_krb5 from RH9 but it fails to work due to an undefined symbol.

Thanks for any assistance,

 - J<