Index: general.ent
===================================================================
--- general.ent	(revision e72dc56eda9bb6d6b9451d3e254691efac915665)
+++ general.ent	(revision b6293773c67e3c1d046111e8d2fc9bbc145e39d9)
@@ -37,5 +37,5 @@
 <!ENTITY tripwire-version             "portable-0.9">   
 <!ENTITY heimdal-version              "0.6.3">   
-<!ENTITY mitkrb-version               "1.3.6"> 
+<!ENTITY mitkrb-version               "1.4"> 
 <!ENTITY cyrus-sasl-version           "2.1.20"> 
 <!ENTITY stunnel-version              "4.07"> 
Index: introduction/welcome/changelog.xml
===================================================================
--- introduction/welcome/changelog.xml	(revision e72dc56eda9bb6d6b9451d3e254691efac915665)
+++ introduction/welcome/changelog.xml	(revision b6293773c67e3c1d046111e8d2fc9bbc145e39d9)
@@ -22,4 +22,8 @@
 
 <itemizedlist>
+
+<listitem><para>February 9th, 2005 [larry]: Updated MIT krb5 to krb-1.4,
+incorporated offical patches for autofs and moved cracklib to required in 
+Linux_PAM.</para></listitem>
 
 <listitem><para>February 9th, 2005 [randy]: Added md5sums and index tags to 
Index: postlfs/config/autofs.xml
===================================================================
--- postlfs/config/autofs.xml	(revision e72dc56eda9bb6d6b9451d3e254691efac915665)
+++ postlfs/config/autofs.xml	(revision b6293773c67e3c1d046111e8d2fc9bbc145e39d9)
@@ -47,11 +47,40 @@
 </sect3>
 
-<!-- <sect3><title>Additional downloads</title>
+<sect3><title>Additional downloads</title>
 <itemizedlist spacing="compact">
-<listitem><para>Required Patch: <ulink
-url="&patch-root;/template-&template-version;-patch_name-patch_version.patch"/></para>
-</listitem></itemizedlist>
-</sect3>
-
+<listitem><para>Recommended Patch: <ulink
+url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-strict.patch"/></para>
+</listitem>
+<listitem><para>Recommended Patch: <ulink
+url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-bad_chdir.patch
+"/></para>
+</listitem>
+<listitem><para>Recommended Patch: <ulink
+url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-mtab_lock.patch
+"/></para>
+</listitem>
+<listitem><para>Recommended Patch: <ulink
+url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-non_block_ping.patch
+"/></para>
+</listitem>
+<listitem><para>Recommended Patch: <ulink
+url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-signal-race-fix.patch
+"/></para>
+</listitem>
+<listitem><para>Recommended Patch: <ulink
+url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-sock-leak-fix.patch
+"/></para>
+</listitem>
+<listitem><para>Recommended Patch: <ulink
+url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-replicated_server_select.patch
+"/></para>
+</listitem>
+<listitem><para>Recommended Patch: <ulink
+url="http://ftp.kernel.org/pub/linux/daemons/autofs/v4/autofs-4.1.3-multi-over.patch
+"/></para>
+</listitem>
+</itemizedlist>
+</sect3>
+<!---
 <sect3><title><application>template</application> dependencies</title>
 <sect4><title>Required</title>
@@ -83,5 +112,13 @@
 commands:</para>
 
-<screen><userinput><command>./configure --prefix=/ --mandir=/usr/share/man &amp;&amp;
+<screen><userinput><command>patch -Np1 -i ../autofs-4.1.3-strict.patch &amp;&amp;
+patch -Np1 -i ../autofs-4.1.3-bad_chdir.patch &amp;&amp;
+patch -Np1 -i ../autofs-4.1.3-mtab_lock.patch &amp;&amp;
+patch -Np1 -i ../autofs-4.1.3-non_block_ping.patch &amp;&amp;
+patch -Np1 -i ../autofs-4.1.3-signal-race-fix.patch &amp;&amp;
+patch -Np1 -i ../autofs-4.1.3-sock-leak-fix.patch &amp;&amp;
+patch -Np1 -i ../autofs-4.1.3-replicated_server_select.patch &amp;&amp;
+patch -Np1 -i ../autofs-4.1.3-multi-over.patch &amp;&amp;
+./configure --prefix=/ --mandir=/usr/share/man &amp;&amp;
 make</command></userinput></screen>
 
Index: postlfs/security/linux_pam.xml
===================================================================
--- postlfs/security/linux_pam.xml	(revision e72dc56eda9bb6d6b9451d3e254691efac915665)
+++ postlfs/security/linux_pam.xml	(revision b6293773c67e3c1d046111e8d2fc9bbc145e39d9)
@@ -54,6 +54,9 @@
 <sect3><title><application>Linux-<acronym>PAM</acronym></application> 
 dependencies</title>
+<sect4><title>Required</title>
+<para><xref linkend="cracklib"/>
+</para></sect4>
 <sect4><title>Optional</title>
-<para><xref linkend="cracklib"/> and <ulink 
+<para><ulink 
 url="http://sourceforge.net/projects/sgmltools-lite/">sgmltools-lite</ulink>
 </para></sect4>
Index: postlfs/security/mitkrb.xml
===================================================================
--- postlfs/security/mitkrb.xml	(revision e72dc56eda9bb6d6b9451d3e254691efac915665)
+++ postlfs/security/mitkrb.xml	(revision b6293773c67e3c1d046111e8d2fc9bbc145e39d9)
@@ -5,9 +5,9 @@
   %general-entities;
 
-  <!ENTITY mitkrb-download-http "http://web.mit.edu/kerberos/www/dist/krb5/1.3/krb5-&mitkrb-version;-signed.tar">
+  <!ENTITY mitkrb-download-http "http://web.mit.edu/kerberos/www/dist/krb5/1.4/krb5-&mitkrb-version;-signed.tar">
   <!ENTITY mitkrb-download-ftp " ">
-  <!ENTITY mitkrb-md5sum "18d5a6a8e1cce120536718d39a052a87">
-  <!ENTITY mitkrb-size "6.3 MB">
-  <!ENTITY mitkrb-buildsize "64 MB">
+  <!ENTITY mitkrb-md5sum "2fa56607677544e3a27b42f7cfa1155b">
+  <!ENTITY mitkrb-size "6.6 MB">
+  <!ENTITY mitkrb-buildsize "55 MB">
   <!ENTITY mitkrb-time "2.55 SBU">
 ]>
@@ -87,5 +87,5 @@
 </para>
 
-<screen><userinput><command>gpg --verify krb5-&mitkrb-version;.tar.gz.asc krb5-&mitkrb-version;.tar.gz</command></userinput></screen>
+<screen><userinput><command>gpg --verify krb5-&mitkrb-version;.tar.gz.asc</command></userinput></screen>
 
 <para>
@@ -366,5 +366,5 @@
 <para>
 For additional information consult <ulink
-url="http://web.mit.edu/kerberos/www/krb5-1.3/#documentation">Documentation
+url="http://web.mit.edu/kerberos/www/krb5-1.4/#documentation">Documentation
 for krb-&mitkrb-version;</ulink> on which the above instructions are based.
 </para>
@@ -379,184 +379,179 @@
 <title>Contents</title>
 
-<para>
-The <application>MIT krb5</application> package contains
-<command>compile-et</command>,
-<command>ftp</command>,
-<command>ftpd</command>,
-<command>gss-client</command>,
-<command>gss-server</command>,
-<command>k5srvutil</command>,
-<command>kadmin</command>,
-<command>kadmin.local</command>,
-<command>kadmind</command>,
-<command>kadmind4</command>,
-<command>kdb5_util</command>
-<command>kdestroy</command>,
-<command>kinit</command>,
-<command>klist</command>,
-<command>klogind</command>,
-<command>kpasswd</command>,
-<command>kprop</command>,
-<command>kpropd</command>,
-<command>krb5-send-pr</command>,
-<command>krb5-config</command>,
-<command>krb524d</command>,
-<command>krb524init</command>,
-<command>krb5kdc</command>,
-<command>kshd</command>,
-<command>ksu</command>,
-<command>ktutil</command>,
-<command>kvno</command>,
-<command>login.krb5</command>,
-<command>rcp</command>,
-<command>rlogin</command>,
-<command>rsh</command>,
-<command>rshd</command>,
-<command>rxtelnet</command>,
-<command>rxterm</command>,
-<command>sclient</command>,
-<command>sim_client</command>,
-<command>sim_server</command>,
-<command>sserver</command>,
-<command>telnet</command>,
-<command>telnetd</command>,
-<command>uuclient</command>,
-<command>uuserver</command>,
-<command>v5passwd</command>,
-<command>v5passwdd</command>,
-<filename class="libraryfile">libcom_err</filename>,
-<filename class="libraryfile">libdes425</filename>,
-<filename class="libraryfile">libgssapi</filename>,
-<filename class="libraryfile">libgssrpc</filename>,
-<filename class="libraryfile">lib5crypto</filename>,
-<filename class="libraryfile">libkadm5clnt</filename>,
-<filename class="libraryfile">libkadm5srv</filename>,
-<filename class="libraryfile">libkdb5</filename>,
-<filename class="libraryfile">libkrb4</filename> and 
-<filename class="libraryfile">libkrb5</filename>.
-</para>
+<segmentedlist>
+<segtitle>Installed Programs</segtitle>
+<segtitle>Installed Libraries</segtitle>
+<segtitle>Installed Directories</segtitle>
+
+<seglistitem>
+<seg>compile-et, ftp, ftpd, gss-client, gss-server, k5srvutil, kadmin,
+kadmin.local, kadmind, kadmind4, kdb5_util, kdestroy, kinit, klist,
+klogind, kpasswd, kprop, kpropd, krb5-send-pr, krb5-config, krb524d,
+krb524init, krb5kdc, kshd, ksu, ktutil, kvno, login.krb5, rcp, rlogin,
+rsh, rshd, rxtelnet, rxterm, sclient, sim_client, sim_server, sserver,
+telnet, telnetd, uuclient, uuserver, v5passwd, v5passwdd</seg>
+<seg>libcom_err.[so,a], libdes425.[so,a], libgssapi.[so,a], libgssrpc.[so,a],
+libkadm5clnt.[so,a], libkadm5srv.[so,a], libkdb5.[so,a], libkrb5.[so,a], libkrb4.[so,a]</seg>
+<seg>/usr/include/kerberosIV and /var/lib/krb5kdc</seg>
+</seglistitem>
+</segmentedlist>
+
+<variablelist>
+<bridgehead renderas="sect3">Short Descriptions</bridgehead>
+<?dbfo list-presentation="list"?>
+
+<varlistentry id="compile_et">
+<term><command>compile_et</command></term>
+<listitem><para>converts the table listing
+error-code names into a <application>C</application> source file..</para>
+<indexterm zone="mitkrb compile_et">
+<primary sortas="b-compile_et">compile_et</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="k5srvutil">
+<term><command>k5srvutil</command></term>
+<listitem><para>is a host keytable manipulation utility.</para>
+<indexterm zone="mitkrb k5srvutil">
+<primary sortas="b-k5srvutil">k5srvutil</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="kadmin">
+<term><command>kadmin</command></term>
+<listitem><para>is an utility used to make modifications
+to the Kerberos database.</para>
+<indexterm zone="mitkrb kadmin">
+<primary sortas="b-kadmin">kadmin</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="kadmind">
+<term><command>kadmind</command></term>
+<listitem><para>is a server for administrative access
+to a Kerberos database.</para>
+<indexterm zone="mitkrb kadmind">
+<primary sortas="b-kadmind">kadmind</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="kinit">
+<term><command>kinit</command></term>
+<listitem><para>is used to authenticate to the Kerberos server as
+a principal and acquire a ticket granting ticket that can later be used
+to obtain tickets for other services.</para>
+<indexterm zone="mitkrb kinit">
+<primary sortas="b-kinit">kinit</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="krb5kdc">
+<term><command>krb5kdc</command></term>
+<listitem><para>is a Kerberos 5 server.</para>
+<indexterm zone="mitkrb krb5kdc">
+<primary sortas="b-krb5kdc">krb5kdc</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="kdestroy">
+<term><command>kdestroy</command></term>
+<listitem><para>removes the current set of tickets.</para>
+<indexterm zone="mitkrb kdestroy">
+<primary sortas="b-kdestroy">kdestroy</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="kdb5util">
+<term><command>kdb5util</command></term>
+<listitem><para>is the <acronym>KDC</acronym> database utility.</para>
+<indexterm zone="mitkrb kdb5util">
+<primary sortas="b-kdb5util">kdb5util</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="klist">
+<term><command>klist</command></term>
+<listitem><para>reads and displays the current tickets in
+the credential cache.</para>
+<indexterm zone="mitkrb klist">
+<primary sortas="b-klist">klist</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="klogind">
+<term><command>klogind</command></term>
+<listitem><para>is the server that responds to
+<command>rlogin</command> requests.</para>
+<indexterm zone="mitkrb klogind">
+<primary sortas="b-klogind">klogind</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="kpasswd">
+<term><command>kpasswd</command></term>
+<listitem><para>is a program for changing Kerberos 5 passwords.</para>
+<indexterm zone="mitkrb kpasswd">
+<primary sortas="b-kpasswd">kpasswd</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="kprop">
+<term><command>kprop</command></term>
+<listitem><para>takes a principal database in a specified
+format and converts it into a stream of database
+records.</para>
+<indexterm zone="mitkrb kprop">
+<primary sortas="b-kprop">kprop</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="kpropd">
+<term><command>kpropd</command></term>
+<listitem><para>receives a database sent by
+<command>kprop</command> and writes it as a local database.</para>
+<indexterm zone="mitkrb kpropd">
+<primary sortas="b-kpropd">kpropd</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="krb5-config-1">
+<term><command>krb5-config</command></term>
+<listitem><para>gives information on how to link
+programs against libraries.</para>
+<indexterm zone="mitkrb krb5-config-1">
+<primary sortas="b-krb5-config-1">krb5-config</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="ksu">
+<term><command>ksu</command></term>
+<listitem><para>is the super user program using Kerberos protocol.
+Requires a properly configured
+<filename class="directory">/etc/shells</filename> and
+<filename>~/.k5login</filename> containing principals authorized to
+become super users.</para>
+<indexterm zone="mitkrb ksu">
+<primary sortas="b-ksu">ksu</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="ktutil">
+<term><command>ktutil</command></term>
+<listitem><para>is a program for managing Kerberos keytabs.</para>
+<indexterm zone="mitkrb ktutil">
+<primary sortas="b-ktutil">ktutil</primary>
+</indexterm></listitem>
+</varlistentry>
+
+<varlistentry id="kvno">
+<term><command>kvno</command></term>
+<listitem><para>prints keyversion numbers of Kerberos principals.</para>
+<indexterm zone="mitkrb kvno">
+<primary sortas="b-kvno">kvno</primary>
+</indexterm></listitem>
+</varlistentry>
+</variablelist>
 
 </sect2>
 
-<sect2><title>Description</title>
-
-<sect3><title>compile_et</title>
-<para>
-<command>compile_et</command> converts the table listing
-error-code names into a <application>C</application> source file.
-</para>
-</sect3>
-
-<sect3><title>k5srvutil</title>
-<para>
-<command>k5srvutil</command> is a host keytable manipulation utility.
-</para>
-</sect3>
-
-<sect3><title>kadmin</title>
-<para>
-<command>kadmin</command> is an utility used to make modifications
-to the Kerberos database.
-</para>
-</sect3>
-
-<sect3><title>kadmind</title>
-<para>
-<command>kadmind</command> is a server for administrative access
-to a Kerberos database.
-</para>
-</sect3>
-
-<sect3><title>kinit</title>
-<para>
-<command>kinit</command> is used to authenticate to the Kerberos server as 
-a principal and acquire a ticket granting ticket that can later be used to 
-obtain tickets for other services.
-</para>
-</sect3>
-
-<sect3><title>krb5kdc</title>
-<para>
-<command>krb5kdc</command> is a Kerberos 5 server.
-</para>
-</sect3>
-
-<sect3><title>kdestroy</title>
-<para>
-<command>kdestroy</command> removes the current set of tickets.
-</para>
-</sect3>
-
-<sect3><title>kdb5_util</title>
-<para>
-<command>kdb5_util</command> is the <acronym>KDC</acronym> database utility.
-</para>
-</sect3>
-
-<sect3><title>klist</title>
-<para>
-<command>klist</command> reads and displays the current tickets in
-the credential cache.
-</para>
-</sect3>
-
-<sect3><title>klogind</title>
-<para>
-<command>klogind</command> is the server that responds to 
-<command>rlogin</command> requests.
-</para>
-</sect3>
-
-<sect3><title>kpasswd</title>
-<para>
-<command>kpasswd</command> is a program for changing Kerberos 5 passwords.
-</para>
-</sect3>
-
-<sect3><title>kprop</title>
-<para>
-<command>kprop</command> takes a principal database in a specified
-format and converts it into a stream of database
-records.
-</para>
-</sect3>
-
-<sect3><title>kpropd</title>
-<para>
-<command>kpropd</command> receives a database sent by
-<command>hprop</command> and writes it as a local database.
-</para>
-</sect3>
-
-<sect3><title>krb5-config</title>
-<para>
-<command>krb5-config</command> gives information on how to link
-programs against libraries.
-</para>
-</sect3>
-
-<sect3><title>ksu</title>
-<para>
-<command>ksu</command> is the super user program using Kerberos protocol. 
-Requires a properly configured 
-<filename class="directory">/etc/shells</filename> and 
-<filename>~/.k5login</filename> containing principals authorized to
-become super users.
-</para>
-</sect3>
-
-<sect3><title>ktutil</title>
-<para>
-<command>ktutil</command> is a program for managing Kerberos keytabs.
-</para>
-</sect3>
-
-<sect3><title>kvno</title>
-<para>
-<command>kvno</command> prints keyversion numbers of Kerberos principals.
-</para>
-</sect3>
-
-</sect2>
-
 </sect1>
