diff --git a/lib/kadm5/ad.c b/lib/kadm5/ad.c
index 26f001cd4..cfc2c61dc 100644
--- a/lib/kadm5/ad.c
+++ b/lib/kadm5/ad.c
@@ -508,7 +508,7 @@ ad_get_cred(kadm5_ad_context *context, const char *password)
 static kadm5_ret_t
 kadm5_ad_chpass_principal(void *server_handle,
 			  krb5_principal principal,
-			  char *password)
+			  const char *password)
 {
     kadm5_ad_context *context = server_handle;
     krb5_data result_code_string, result_string;
@@ -562,7 +562,7 @@ static kadm5_ret_t
 kadm5_ad_create_principal(void *server_handle,
 			  kadm5_principal_ent_t entry,
 			  u_int32_t mask,
-			  char *password)
+			  const char *password)
 {
     kadm5_ad_context *context = server_handle;
 
diff --git a/lib/kadm5/chpass_c.c b/lib/kadm5/chpass_c.c
index 015c70bff..1284af169 100644
--- a/lib/kadm5/chpass_c.c
+++ b/lib/kadm5/chpass_c.c
@@ -38,7 +38,7 @@ RCSID("$Id$");
 kadm5_ret_t
 kadm5_c_chpass_principal(void *server_handle, 
 			 krb5_principal princ,
-			 char *password)
+			 const char *password)
 {
     kadm5_client_context *context = server_handle;
     kadm5_ret_t ret;
diff --git a/lib/kadm5/chpass_s.c b/lib/kadm5/chpass_s.c
index 67bdd9e94..cd98a7528 100644
--- a/lib/kadm5/chpass_s.c
+++ b/lib/kadm5/chpass_s.c
@@ -38,7 +38,7 @@ RCSID("$Id$");
 static kadm5_ret_t
 change(void *server_handle, 
        krb5_principal princ,
-       char *password,
+       const char *password,
        int cond)
 {
     kadm5_server_context *context = server_handle;
diff --git a/lib/kadm5/common_glue.c b/lib/kadm5/common_glue.c
index f8f932f82..436071622 100644
--- a/lib/kadm5/common_glue.c
+++ b/lib/kadm5/common_glue.c
@@ -40,7 +40,7 @@ RCSID("$Id$");
 kadm5_ret_t
 kadm5_chpass_principal(void *server_handle,
 		       krb5_principal princ,
-		       char *password)
+		       const char *password)
 {
     return __CALL(chpass_principal, (server_handle, princ, password));
 }
@@ -59,7 +59,7 @@ kadm5_ret_t
 kadm5_create_principal(void *server_handle,
 		       kadm5_principal_ent_t princ,
 		       u_int32_t mask,
-		       char *password)
+		       const char *password)
 {
     return __CALL(create_principal, (server_handle, princ, mask, password));
 }
diff --git a/lib/kadm5/private.h b/lib/kadm5/private.h
index f3dccd1b5..2376366bf 100644
--- a/lib/kadm5/private.h
+++ b/lib/kadm5/private.h
@@ -37,9 +37,9 @@
 #define __kadm5_privatex_h__
 
 struct kadm_func {
-    kadm5_ret_t (*chpass_principal) (void *, krb5_principal, char*);
+    kadm5_ret_t (*chpass_principal) (void *, krb5_principal, const char*);
     kadm5_ret_t (*create_principal) (void*, kadm5_principal_ent_t, 
-				     u_int32_t, char*);
+				     u_int32_t, const char*);
     kadm5_ret_t (*delete_principal) (void*, krb5_principal);
     kadm5_ret_t (*destroy) (void*);
     kadm5_ret_t (*flush) (void*);