Index: introduction/welcome/changelog.xml
===================================================================
--- introduction/welcome/changelog.xml	(revision 0f0774aef13aa96d6b1da5c0228876fd2fdaedf3)
+++ introduction/welcome/changelog.xml	(revision 096aa70966162bad761759be129e3070491224ea)
@@ -49,4 +49,8 @@
       <itemizedlist>
         <listitem>
+          <para>[bdubbs] - Update to kerberos-1.14.1. Fixes
+          <ulink url="&blfs-ticket-root;7640">#7640</ulink>.</para>
+        </listitem>
+        <listitem>
           <para>[ken] - Update to fontforge-20160404. Fixes
           <ulink url="&blfs-ticket-root;7689">#7689</ulink>.</para>
Index: packages.ent
===================================================================
--- packages.ent	(revision 0f0774aef13aa96d6b1da5c0228876fd2fdaedf3)
+++ packages.ent	(revision 096aa70966162bad761759be129e3070491224ea)
@@ -23,5 +23,5 @@
 <!ENTITY libpwquality-version         "1.3.0">
 <!ENTITY mitkrb-major-version         "1.14">
-<!ENTITY mitkrb-version               "&mitkrb-major-version;">
+<!ENTITY mitkrb-version               "1.14.1">
 <!ENTITY nettle-version               "3.2">
 <!ENTITY nss-minor-version            "23">
Index: postlfs/security/mitkrb.xml
===================================================================
--- postlfs/security/mitkrb.xml	(revision 0f0774aef13aa96d6b1da5c0228876fd2fdaedf3)
+++ postlfs/security/mitkrb.xml	(revision 096aa70966162bad761759be129e3070491224ea)
@@ -8,8 +8,8 @@
   <!ENTITY mitkrb-download-http "http://web.mit.edu/kerberos/dist/krb5/&mitkrb-major-version;/krb5-&mitkrb-version;.tar.gz">
   <!ENTITY mitkrb-download-ftp  " ">
-  <!ENTITY mitkrb-md5sum        "0727968764d0208388b85ad31aafde24">
-  <!ENTITY mitkrb-size          "12 MB">
-  <!ENTITY mitkrb-buildsize     "165 MB (additional 26 MB for the testsuite)">
-  <!ENTITY mitkrb-time          "1 SBU (additional 5.5 SBU for the testsuite)">
+  <!ENTITY mitkrb-md5sum        "400de0cabbfbe85c2c36f60347bf7dc6">
+  <!ENTITY mitkrb-size          "11.7 MB">
+  <!ENTITY mitkrb-buildsize     "171 MB (additional 18 MB for the testsuite)">
+  <!ENTITY mitkrb-time          "1.1 SBU (additional 1.8 SBU for the testsuite)">
 ]>
 
@@ -104,39 +104,4 @@
   <sect2 role="installation">
     <title>Installation of MIT Kerberos V5</title>
-<!--
-    <para>
-      <application>MIT Kerberos V5</application> is distributed in a
-      TAR file containing a compressed TAR package and a detached PGP-2
-      <filename class="extension">ASC</filename> file. You'll need to unpack
-      the distribution tar file, then unpack the compressed tar file before
-      starting the build.
-    </para>
-
-    <para>
-      After unpacking the distribution tarball and if you have
-      <xref linkend="gnupg2"/> installed, you can
-      authenticate the package.  First, check the contents of the file
-      <filename>krb5-&mitkrb-version;.tar.gz.asc</filename>.
-    </para>
-
-<screen><userinput>gpg2 -\-verify krb5-&mitkrb-version;.tar.gz.asc krb5-&mitkrb-version;.tar.gz</userinput></screen>
-
-    <para>You will probably see output similar to:</para>
-
-<screen><literal>gpg: Signature made Fri May  8 23:40:13 2015 utc using RSA key ID 0055C305
-gpg: Can't check signature: No public key</literal></screen>
-
-    <para>
-      You can import the public key with:
-    </para>
-
-<screen><userinput>gpg2 -\-keyserver pgp.mit.edu -\-recv-keys 0055C305</userinput></screen>
-
-    <para>
-      Now re-verify the package with the first command above.  You should  get a
-      indication of a good signature, but the key will still not be certified
-      with a trusted signature.  Trusting the downloaded key is a separate
-      operation but it is up to you to determine the level of trust.
-    </para>-->
 
     <para>
@@ -153,4 +118,7 @@
 sed -e 's@\^u}@^u cols 300}@' \
     -i tests/dejagnu/config/default.exp &amp;&amp;
+
+sed -e '/eq 0/{N;s/12 //}' \
+    -i plugins/kdb/db2/libdb2/test/run.test &amp;&amp;
 
 autoconf &amp;&amp;
@@ -165,11 +133,12 @@
 
     <para>
-      To test the build, issue: <command>make check</command>. You need at
-      least <xref linkend="tcl"/>, which is used to drive the testsuite.
-      Furthermore, <xref linkend="dejagnu"/> must be available for some
-      of the tests to run. If you have a former version of MIT Kerberos V5
+      To test the build, issue as the <systemitem
+      class="username">root</systemitem> user: <command>make check</command>.
+      You need at least <xref linkend="tcl"/>, which is used to drive the
+      testsuite.  Furthermore, <xref linkend="dejagnu"/> must be available for
+      some of the tests to run. If you have a former version of MIT Kerberos V5
       installed, it may happen that the test suite pick up the installed
-      versions of the libraries, rather than the newly built ones. If so,
-      it is better to run the tests after the installation.
+      versions of the libraries, rather than the newly built ones. If so, it is
+      better to run the tests after the installation.
     </para>
 
@@ -180,9 +149,9 @@
 <screen role="root"><userinput>make install &amp;&amp;
 
-for LIBRARY in gssapi_krb5 gssrpc k5crypto kadm5clnt kadm5srv \
-               kdb5 kdb_ldap krad krb5 krb5support verto ; do
-    chmod -v 755 /usr/lib/lib$LIBRARY.so
+for f in gssapi_krb5 gssrpc k5crypto kadm5clnt kadm5srv \
+         kdb5 kdb_ldap krad krb5 krb5support verto ; do
+
+    find /usr/lib -type f -name "lib$f*.so*" -exec chmod -v 755 {} \;    
 done          &amp;&amp;
-unset LIBRARY &amp;&amp;
 
 mv -v /usr/lib/libkrb5.so.3*        /lib &amp;&amp;
@@ -200,5 +169,4 @@
 cp -vfr ../doc/*  /usr/share/doc/krb5-&mitkrb-version;</userinput></screen>
 
-
   </sect2>
 
@@ -209,10 +177,11 @@
       <command>sed -e ...</command>: The first <command>sed</command> fixes
       <application>Python</application> detection. The second one increases
-      the width of the virtual terminal used for some tests, to prevent
-      some spurious characters to be echoed, which is taken as a failure.
-    </para>
-
-    <para>
-      <parameter>--localstatedir=/var/lib</parameter>: This parameter is
+      the width of the virtual terminal used for some tests to prevent
+      some spurious text in the output which is taken as a failure. The
+      third <command>sed</command> removes a test that is known to fail.
+    </para>
+
+    <para>
+      <option>--localstatedir=/var/lib</option>: This option is
       used so that the Kerberos variable run-time data is located in
       <filename class="directory">/var/lib</filename> instead of
@@ -221,5 +190,5 @@
 
     <para>
-      <parameter>--with-system-et</parameter>: This switch causes the build
+      <option>--with-system-et</option>: This switch causes the build
       to use the system-installed versions of the error-table support
       software.
@@ -227,5 +196,5 @@
 
     <para>
-      <parameter>--with-system-ss</parameter>: This switch causes the build
+      <option>--with-system-ss</option>: This switch causes the build
       to use the system-installed versions of the subsystem command-line
       interface software.
@@ -233,5 +202,5 @@
 
     <para>
-      <parameter>--with-system-verto=no</parameter>: This switch fixes a bug in
+      <option>--with-system-verto=no</option>: This switch fixes a bug in
       the package: it does not recognize its own verto library installed
       previously. This is not a problem, if reinstalling the same version,
@@ -241,6 +210,25 @@
 
     <para>
-      <parameter>--enable-dns-for-realm</parameter>: This switch allows
+      <option>--enable-dns-for-realm</option>: This switch allows
       realms to be resolved using the DNS server.
+    </para>
+
+    <para>
+      <option>--with-ldap</option>: Use this switch if you want to compile
+      <application>OpenLDAP</application> database backend module.
+    </para>
+
+    <para>
+      <command>mv -v /usr/lib/libk... /lib </command> and 
+      <command>ln -v -sf ../../lib/libk... /usr/lib/libk...</command>: 
+      Move critical libraries to the
+      <filename class="directory">/lib</filename> directory so that they are
+      available when the <filename class="directory">/usr</filename>
+      filesystem is not mounted.
+    </para>
+
+    <para>
+      <command>find /usr/lib -type f -name "lib$f*.so*" -exec chmod -v 755 {} \;</command>: 
+      This command changes the permisison of installed libraries.  
     </para>
 
@@ -251,9 +239,4 @@
       available when the <filename class="directory">/usr</filename>
       filesystem is not mounted.
-    </para>
-
-    <para>
-      <option>--with-ldap</option>: Use this switch if you want to compile
-      <application>OpenLDAP</application> database backend module.
     </para>
 
@@ -508,6 +491,7 @@
           /usr/include/{gssapi,gssrpc,kadm5,krb5},
           /usr/lib/krb5,
-          /usr/share/{doc/krb5-&mitkrb-version;,examples/krb5}, and
-          /var/lib/{,run}/krb5kdc
+          /usr/share/{doc/krb5-&mitkrb-version;,examples/krb5},
+          /var/lib/krb5kdc, and 
+          /var/lib/run/krb5kdc 
         </seg>
       </seglistitem>
