--- src/lib/kadm5/srv/svr_principal.c 2010-03-15 23:50:46.000000000 +0000 +++ src/lib/kadm5/srv/svr_principal.c.oden 2012-07-04 11:44:07.000000000 +0000 @@ -196,7 +196,7 @@ check_1_6_dummy(kadm5_principal_ent_t en char *password = *passptr; /* Old-style randkey operations disallowed tickets to start. */ - if (!(mask & KADM5_ATTRIBUTES) || + if (password == NULL || !(mask & KADM5_ATTRIBUTES) || !(entry->attributes & KRB5_KDB_DISALLOW_ALL_TIX)) return;