diff --git a/kerberos/templates/kadm5.acl.erb b/kerberos/templates/kadm5.acl.erb
index 1c4d269..bf48058 100644
--- a/kerberos/templates/kadm5.acl.erb
+++ b/kerberos/templates/kadm5.acl.erb
@@ -1 +1,2 @@
 puppet/admin@<%= kerberos_realm %> ci */*@<%= kerberos_realm %>
+smbkrb5pwd/<%= homename %>@<%= kerberos_realm %> ac *@<%= kerberos_realm %>