diff --git a/source3/include/krb5_protos.h b/source3/include/krb5_protos.h
index 97e6871c89d..0b8aa712881 100644
--- a/source3/include/krb5_protos.h
+++ b/source3/include/krb5_protos.h
@@ -1,3 +1,6 @@
+struct PAC_DATA;
+struct PAC_SIGNATURE_DATA;
+
 /* work around broken krb5.h on sles9 */
 #ifdef SIZEOF_LONG
 #undef SIZEOF_LONG
diff --git a/source3/libads/kerberos_proto.h b/source3/libads/kerberos_proto.h
index 7be81fa9a54..afd57fe220c 100644
--- a/source3/libads/kerberos_proto.h
+++ b/source3/libads/kerberos_proto.h
@@ -1,3 +1,5 @@
+struct PAC_LOGON_INFO;
+
 /* The following definitions come from libads/kerberos_verify.c  */
 
 NTSTATUS ads_verify_ticket(TALLOC_CTX *mem_ctx,
diff --git a/source3/libads/kerberos_verify.c b/source3/libads/kerberos_verify.c
index aaeff59182b..887dac05025 100644
--- a/source3/libads/kerberos_verify.c
+++ b/source3/libads/kerberos_verify.c
@@ -27,6 +27,7 @@
 #include "smb_krb5.h"
 #include "libads/kerberos_proto.h"
 #include "secrets.h"
+#include "../librpc/gen_ndr/krb5pac.h"
 
 #ifdef HAVE_KRB5
 
diff --git a/source3/libsmb/clikrb5.c b/source3/libsmb/clikrb5.c
index fb2fdba86df..4eb43cfff1d 100644
--- a/source3/libsmb/clikrb5.c
+++ b/source3/libsmb/clikrb5.c
@@ -22,6 +22,7 @@
 
 #include "includes.h"
 #include "smb_krb5.h"
+#include "../librpc/gen_ndr/krb5pac.h"
 
 #ifndef KRB5_AUTHDATA_WIN2K_PAC
 #define KRB5_AUTHDATA_WIN2K_PAC 128
diff --git a/source3/smbd/sesssetup.c b/source3/smbd/sesssetup.c
index 514170e5fa5..35b8c04747d 100644
--- a/source3/smbd/sesssetup.c
+++ b/source3/smbd/sesssetup.c
@@ -28,6 +28,7 @@
 #include "../libcli/auth/ntlmssp.h"
 #include "ntlmssp_wrap.h"
 #include "librpc/gen_ndr/messaging.h"
+#include "../librpc/gen_ndr/krb5pac.h"
 #include "libads/kerberos_proto.h"
 
 /* For split krb5 SPNEGO blobs. */
diff --git a/source3/smbd/smb2_sesssetup.c b/source3/smbd/smb2_sesssetup.c
index 4f6d5d2e13e..8e8e26c2a3a 100644
--- a/source3/smbd/smb2_sesssetup.c
+++ b/source3/smbd/smb2_sesssetup.c
@@ -25,6 +25,7 @@
 #include "../libcli/auth/spnego.h"
 #include "../libcli/auth/ntlmssp.h"
 #include "ntlmssp_wrap.h"
+#include "../librpc/gen_ndr/krb5pac.h"
 #include "libads/kerberos_proto.h"
 
 static NTSTATUS smbd_smb2_session_setup(struct smbd_smb2_request *smb2req,
diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c
index 11b16310b41..70adc29b1e1 100644
--- a/source3/winbindd/winbindd_pam.c
+++ b/source3/winbindd/winbindd_pam.c
@@ -33,6 +33,7 @@
 #include "../lib/crypto/arcfour.h"
 #include "../libcli/security/dom_sid.h"
 #include "ads.h"
+#include "../librpc/gen_ndr/krb5pac.h"
 
 #undef DBGC_CLASS
 #define DBGC_CLASS DBGC_WINBIND