smbk5pwd: unable to initialize krb5 admin context: failed to open /var/lib/heimdal-kdc/m-key: Permission denied (13).

["Bill Baird" <billbaird3@gmail.com>]

After many struggles getting smbk5pwd to work on CentOS, I have switched to Ubuntu LTS 8.04. I have heimdal-kdc installed as well as slapd. I was able to compile smbk5pwd and install it, but once I add the overlay to my config...I get this error when I try to start it.

....
config_build_entry: "olcDatabase={-1}frontend"
config_build_entry: "olcDatabase={0}config"
config_build_entry: "olcDatabase={1}bdb"
config_build_entry: "olcOverlay={0}smbk5pwd"

backend_startup_one: starting "dc=phoenixmi,dc=com"
bdb_db_open: DB_CONFIG for suffix "dc=phoenixmi,dc=com" has changed.
Performing database recovery to activate new settings.
bdb_db_open: database "dc=phoenixmi,dc=com": dbenv_open(/var/lib/ldap).

smbk5pwd: unable to initialize krb5 admin context: failed to open /var/lib/heimdal-kdc/m-key: Permission denied (13).
backend_startup_one: bi_db_open failed! (-1)
slapd shutdown: initiated
====> bdb_cache_release_all

slapd destroy: freeing system resources.
slapd stopped.
connections_destroy: nothing to destroy.

I have made sure the /var/lib/heimdal-kdc/m-key file exists, and even made the file and directory have 777 permissions. Any ideas? Below is my slapd.conf config.

include /etc/ldap/schema/core.schema
include /etc/ldap/schema/cosine.schema
include /etc/ldap/schema/inetorgperson.schema
include /etc/ldap/schema/nis.schema
include /etc/ldap/schema/samba.schema
include /etc/ldap/schema/hdb.schema

modulepath /usr/lib/ldap
moduleload back_bdb
moduleload smbk5pwd

pidfile /var/run/slapd/slapd.pid
argsfile /var/run/slapd/slapd.args

database        bdb
suffix          "dc=phoenixmi,dc=com"

rootdn          "cn=manager,dc=phoenixmi,dc=com"
rootpw          {SSHA}xxxxxxxxxx
directory       /var/lib/ldap
overlay         smbk5pwd

##just for testing
access to *
        by * write

Thank you, any help would be greatly appreciated!

--Bill