The telnetd in kth-krb4-1.0.1 seems to be vulnerable to the buffer overflow

attack described in SA2001-12 (noted by T. M. Pederson <salvage@plethora.net>
in PR pkg/13610).

Instead of applying the patch submitted by T. M. Pederson, we upgrade
kth-krb4 to 1.0.9 where the vulnerability has been fixed.

The upgrade to 1.0.9 was provided by Assar Westerlund <assar@netbsd.org>
and slightly modified by myself.

Also included is diff file for /etc/services for NetBSD-1.5 (and 1.5.1)
also submitted by T. M. Pederson <salvage@plethora.net> in PR 12540.

Note: files/services.diff resurfaces as files/services-1.4.2.diff.

Closes PR 13610 and PR 12540.

12 files changed, 149 insertions, 157 deletions

diff --git a/security/kth-krb4/Makefile b/security/kth-krb4/Makefile
index 14c1f1055eb..5c94bec80a2 100644
--- a/security/kth-krb4/Makefile
+++ b/security/kth-krb4/Makefile
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.12 2001/04/12 14:53:39 wennmach Exp $
+# $NetBSD: Makefile,v 1.13 2001/08/02 12:46:48 wennmach Exp $
 #
 
-DISTNAME=		krb4-1.0.1
-PKGNAME=		kth-krb4-1.0.1
+DISTNAME=		krb4-1.0.9
+PKGNAME=		kth-krb4-1.0.9
 CATEGORIES=		security net
 MASTER_SITES=		ftp://ftp.pdc.kth.se/pub/krb/src/
 
@@ -29,6 +29,7 @@ post-install:
 	${INSTALL_DATA} ${WRKSRC}/etc/krb.conf ${PREFIX}/share/examples/kth-krb4
 	${INSTALL_DATA} ${WRKSRC}/etc/krb.realms ${PREFIX}/share/examples/kth-krb4
 	${INSTALL_DATA} ${WRKSRC}/etc/inetd.conf.changes ${PREFIX}/share/examples/kth-krb4
-	${INSTALL_DATA} ${FILESDIR}/services.diff ${PREFIX}/share/examples/kth-krb4
+	${INSTALL_DATA} ${FILESDIR}/services-1.4.2.diff ${PREFIX}/share/examples/kth-krb4
+	${INSTALL_DATA} ${FILESDIR}/services-1.5.diff ${PREFIX}/share/examples/kth-krb4
 
 .include "../../mk/bsd.pkg.mk"
diff --git a/security/kth-krb4/distinfo b/security/kth-krb4/distinfo
index 5b5d764c722..c6e41459e5c 100644
--- a/security/kth-krb4/distinfo
+++ b/security/kth-krb4/distinfo
@@ -1,13 +1,10 @@
-$NetBSD: distinfo,v 1.2 2001/04/19 15:40:32 agc Exp $
+$NetBSD: distinfo,v 1.3 2001/08/02 12:46:48 wennmach Exp $
 
-SHA1 (krb4-1.0.1.tar.gz) = 571241fa7f41badd36df757a17c031d3bcdbb689
-Size (krb4-1.0.1.tar.gz) = 1387037 bytes
-SHA1 (patch-aa) = 2dd5ab6e8627c8e8ca59f647ccb2904bf50e0e2a
-SHA1 (patch-ab) = 96182737812e3736d06c07c83210701c40aeddd5
-SHA1 (patch-ac) = be077919a4db794e271e50162914391c7a8cbf11
-SHA1 (patch-ad) = 40f3f488a2f27a4c76536bf2881f7141257872a0
-SHA1 (patch-ae) = 69786755e1f48be9c7c6fc579f63c36b42060af3
-SHA1 (patch-af) = 427fe2439f295d4a98560854335c48f1e0494b6d
+SHA1 (krb4-1.0.9.tar.gz) = 23e1e93e025f5b33c26592b6355c982458c9544a
+Size (krb4-1.0.1.tar.gz) = 1402551 bytes
+SHA1 (patch-aa) = c5e312bc29c5c947c7838ebb221bb6307727c81f
+SHA1 (patch-ad) = 01b2a8957ac22cc4cc28c7da44d1a956fc8f3c1b
+SHA1 (patch-ae) = 421445ebd2d3afccfdf6514b68847beb13f1cffa
 SHA1 (patch-ag) = e39c3159fe89cedbb34dd5dadcb95826cd8d4576
 SHA1 (patch-ah) = 95cbf045bf327ebcff920b9416a9f0eba04cb5ca
 SHA1 (patch-ai) = 5082b47d658a94f27cbfefd79391a48cb11c2ec1
diff --git a/security/kth-krb4/files/services.diff b/security/kth-krb4/files/services-1.4.2.diff
index dad261cb2bd..4ae835d8be5 100644
--- a/security/kth-krb4/files/services.diff
+++ b/security/kth-krb4/files/services-1.4.2.diff
@@ -1,4 +1,4 @@
-$NetBSD: services.diff,v 1.1 2000/06/08 14:03:47 wennmach Exp $
+$NetBSD: services-1.4.2.diff,v 1.1 2001/08/02 12:46:48 wennmach Exp $
 This patch is relative to NetBSD-1.4.2.
 
 --- /etc/services.orig	Thu Apr 20 10:29:34 2000
diff --git a/security/kth-krb4/files/services-1.5.diff b/security/kth-krb4/files/services-1.5.diff
new file mode 100644
index 00000000000..b20e0bc408f
--- /dev/null
+++ b/security/kth-krb4/files/services-1.5.diff
@@ -0,0 +1,55 @@
+$NetBSD: services-1.5.diff,v 1.1 2001/08/02 12:46:49 wennmach Exp $
+This patch is relative to NetBSD-1.5/1.5.1
+
+--- /etc/services.orig	Wed Aug  1 19:29:26 2001
++++ /etc/services	Wed Aug  1 19:42:33 2001
+@@ -52,8 +52,8 @@
+ www		80/tcp		http	# WorldWideWeb HTTP
+ www		80/udp			# HyperText Transfer Protocol
+ link		87/tcp		ttylink
+-kerberos	88/tcp		krb5	# Kerberos v5
+-kerberos	88/udp
++#kerberos	88/tcp		krb5    # Kerberos v5
++#kerberos	88/udp
+ supdup		95/tcp
+ # 100 - reserved
+ hostnames	101/tcp		hostname	# usually from sri-nic
+@@ -211,11 +211,11 @@
+ kshell		544/tcp		krcmd	# Kerberos `rsh'
+ ekshell		545/tcp			# Encrypted kshell
+ kerberos-adm	749/tcp			# Kerberos `kadmin' (v5)
+-kerberos-iv	750/udp		kdc kerberos4	# Kerberos (server) udp
+-kerberos-iv	750/tcp		kdc kerberos4	# Kerberos (server) tcp
+-kerberos-master 751/udp			# Kerberos admin server udp
+-kerberos-master 751/tcp			# Kerberos admin server tcp
+-hprop		754/tcp			# Heimdal KDC database propagation
++#kerberos-iv	750/udp         kdc kerberos4   # Kerberos (server) udp
++#kerberos-iv	750/tcp         kdc kerberos4   # Kerberos (server) tcp
++#kerberos-master	751/udp                      # Kerberos admin server udp
++#kerberos-master	751/tcp                      # Kerberos admin server tcp
++#hprop		754/tcp                 # Heimdal KDC database propagation
+ krbupdate	760/tcp		kreg	# BSD Kerberos registration
+ kpasswd		761/tcp		kpwd	# BSD Kerberos `passwd'
+ kpop		1109/tcp		# Kerberos POP server
+@@ -265,3 +265,21 @@
+ codasrv		2432/udp		# server port
+ codasrv-se	2433/tcp		# tcp side effects
+ codasrv-se	2433/udp		# udp sftp side effect
++
++#
++# KTH Kerberos IV implementation
++# Substitutes and/or adds alternate names with respect to Kerberos V
++# services.
++#
++kerberos-sec	88/tcp		krb5	# Kerberos secondary port TCP
++kerberos-sec	88/udp			# Kerberos secondary port UDP
++kerberos-adm	749/udp			# v5 kadmin
++kerberos-iv	750/udp		kdc kerberos kerberos4	# Kerberos (server) udp
++kerberos-iv	750/tcp         kdc kerberos kerberos4	# Kerberos (server) tcp
++kerberos-master	751/udp		kerberos_master	# Kerberos admin server udp
++kerberos-master	751/tcp		kerberos_master	# Kerberos admin server tcp
++hprop		754/tcp		krb_prop	# Heimdal KDC database propagation
++rkinit		2108/tcp		# Kerberos remote kinit
++kx		2111/tcp		# X over kerberos
++kip		2112/tcp		# IP over kerberos
++kauth		2120/tcp		# Remote kauth
diff --git a/security/kth-krb4/patches/patch-aa b/security/kth-krb4/patches/patch-aa
index df3220b3828..f0a0e7a5d73 100644
--- a/security/kth-krb4/patches/patch-aa
+++ b/security/kth-krb4/patches/patch-aa
@@ -1,11 +1,11 @@
-$NetBSD: patch-aa,v 1.2 2000/06/08 13:53:25 wennmach Exp $
+$NetBSD: patch-aa,v 1.3 2001/08/02 12:46:49 wennmach Exp $
 
 Do also install roken.h, roken-common.h, and libroken.a
 Use "cp" instead of "install" during the build process, since the latter
 may require root privileges.
 
---- lib/roken/Makefile.in.orig	Tue Nov 30 20:22:59 1999
-+++ lib/roken/Makefile.in	Thu May 25 16:25:38 2000
+--- lib/roken/Makefile.in.orig	Thu Jun 21 17:21:10 2001
++++ lib/roken/Makefile.in	Wed Aug  1 14:25:16 2001
 @@ -3,6 +3,7 @@
  #
  
@@ -13,8 +13,8 @@ may require root privileges.
 +CP = /bin/cp
  
  srcdir = @srcdir@
- VPATH = @srcdir@
-@@ -24,6 +25,13 @@
+ top_srcdir = @top_srcdir@
+@@ -27,6 +28,13 @@
  prefix = @prefix@
  exec_prefix = @exec_prefix@
  libdir = @libdir@
@@ -28,7 +28,7 @@ may require root privileges.
  EXECSUFFIX = @EXECSUFFIX@
  PICFLAGS = # @PICFLAGS@
   
-@@ -162,8 +170,19 @@
+@@ -169,8 +177,19 @@
  	$(CC) -c $(DEFS) -I. -I../../include -I$(srcdir) $(CFLAGS) $(CPPFLAGS) $(PICFLAGS) $<
  
  install: all
@@ -48,7 +48,7 @@ may require root privileges.
  
  TAGS: $(SOURCES) $(EXTRA_SOURCES)
  	etags $(SOURCES) $(EXTRA_SOURCES)
-@@ -213,8 +232,8 @@
+@@ -220,8 +239,8 @@
  install-roken-h: roken.h
  	@if [ -f ../../include/roken.h ] && cmp -s ../../include/roken.h roken.h ; \
  	then :; else \
diff --git a/security/kth-krb4/patches/patch-ab b/security/kth-krb4/patches/patch-ab
deleted file mode 100644
index fdf63699ab0..00000000000
--- a/security/kth-krb4/patches/patch-ab
+++ /dev/null
@@ -1,26 +0,0 @@
-$NetBSD: patch-ab,v 1.2 2000/06/08 13:53:25 wennmach Exp $
-
-Use "cp" instead of "install" during the build process, since the latter
-may require root privileges. 
-
---- lib/krb/Makefile.in.orig	Thu Nov 25 06:26:26 1999
-+++ lib/krb/Makefile.in	Thu May 25 18:32:21 2000
-@@ -7,6 +7,7 @@
- VPATH = @srcdir@
- 
- CC = @CC@
-+CP = /bin/cp
- LINK = @LINK@
- AR = ar
- RANLIB = @RANLIB@
-@@ -359,8 +360,8 @@
- all-local: $(inc_DATA)
- 	@for i in $(inc_DATA); do \
- 		if cmp -s  $$i $(idir)/$$i 2> /dev/null ; then :; else\
--			echo " $(INSTALL_DATA) $$i $(idir)/$$i"; \
--			$(INSTALL_DATA) $$i $(idir)/$$i; \
-+			echo " $(CP) $$i $(idir)/$$i"; \
-+			$(CP) $$i $(idir)/$$i; \
- 		fi ; \
- 	done
- 
diff --git a/security/kth-krb4/patches/patch-ac b/security/kth-krb4/patches/patch-ac
deleted file mode 100644
index 26bdaf6677f..00000000000
--- a/security/kth-krb4/patches/patch-ac
+++ /dev/null
@@ -1,26 +0,0 @@
-$NetBSD: patch-ac,v 1.2 2000/06/08 13:53:25 wennmach Exp $
-
-Use "cp" instead of "install" during the build process, since the latter
-may require root privileges. 
-
---- lib/kadm/Makefile.in.orig	Thu May 25 13:31:47 2000
-+++ lib/kadm/Makefile.in	Thu May 25 13:32:23 2000
-@@ -3,6 +3,7 @@
- #
- 
- SHELL = /bin/sh
-+CP = /bin/cp
- 
- srcdir = @srcdir@
- VPATH = @srcdir@
-@@ -117,8 +118,8 @@
- all-local: $(inc_DATA)
- 	@for i in $(inc_DATA); do \
- 		if cmp -s  $$i $(idir)/$$i 2> /dev/null ; then :; else\
--			echo " $(INSTALL_DATA) $$i $(idir)/$$i"; \
--			$(INSTALL_DATA) $$i $(idir)/$$i; \
-+			echo " $(CP) $$i $(idir)/$$i"; \
-+			$(CP) $$i $(idir)/$$i; \
- 		fi ; \
- 	done
- 
diff --git a/security/kth-krb4/patches/patch-ad b/security/kth-krb4/patches/patch-ad
index 77fe416d566..5f29e33d827 100644
--- a/security/kth-krb4/patches/patch-ad
+++ b/security/kth-krb4/patches/patch-ad
@@ -1,37 +1,10 @@
-$NetBSD: patch-ad,v 1.2 2000/06/08 13:53:26 wennmach Exp $
+$NetBSD: patch-ad,v 1.3 2001/08/02 12:46:49 wennmach Exp $
 
-Do not try to strip scripts.
+Use INSTALL_SCRIPT on zrefresh, to avoid striping it.
 
---- appl/kauth/Makefile.in.orig	Thu May 25 13:53:23 2000
-+++ appl/kauth/Makefile.in	Thu May 25 14:17:49 2000
-@@ -17,6 +17,7 @@
- LD_FLAGS = @LD_FLAGS@
- INSTALL = @INSTALL@
- INSTALL_PROGRAM = @INSTALL_PROGRAM@
-+INSTALL_SCRIPT = ${INSTALL_PROGRAM:C/-s//}
- LIBS = @LIBS@
- MKINSTALLDIRS = @top_srcdir@/mkinstalldirs
- 
-@@ -28,9 +29,10 @@
- transform=@program_transform_name@
- EXECSUFFIX=@EXECSUFFIX@
- 
--PROG_BIN	= kauth$(EXECSUFFIX) ksrvtgt
-+PROG_BIN	= kauth$(EXECSUFFIX)
- PROG_LIBEXEC	= kauthd$(EXECSUFFIX)
--PROGS = $(PROG_BIN) $(PROG_LIBEXEC)
-+PROG_SCRIPT	= ksrvtgt
-+PROGS = $(PROG_BIN) $(PROG_LIBEXEC) $(PROG_SCRIPT)
- 
- SOURCES_KAUTH  = kauth.c rkinit.c
- SOURCES_KAUTHD = kauthd.c
-@@ -58,10 +60,13 @@
- 	for x in $(PROG_BIN); do \
- 	  $(INSTALL_PROGRAM) $$x $(DESTDIR)$(bindir)/`echo $$x| sed '$(transform)'`; \
- 	done
-+	for x in $(PROG_SCRIPT); do \
-+	  $(INSTALL_SCRIPT) $$x $(DESTDIR)$(bindir)/`echo $$x| sed '$(transform)'`; \
-+	done
+--- appl/kauth/Makefile.in	2001/06/21 15:15:15	1.40.16.2
++++ appl/kauth/Makefile.in	2001/08/01 14:58:35	1.40.16.3
+@@ -67,7 +67,7 @@
  	if test -f $(DESTDIR)$(bindir)/zrefresh -o -r  $(DESTDIR)$(bindir)/zrefresh; then \
  	  true; \
  	else \
diff --git a/security/kth-krb4/patches/patch-ae b/security/kth-krb4/patches/patch-ae
index a55dc5c16e0..6a4c8df3619 100644
--- a/security/kth-krb4/patches/patch-ae
+++ b/security/kth-krb4/patches/patch-ae
@@ -1,23 +1,69 @@
-$NetBSD: patch-ae,v 1.2 2000/06/08 13:53:26 wennmach Exp $
+$NetBSD: patch-ae,v 1.3 2001/08/02 12:46:49 wennmach Exp $
 
-Do not try to strip scripts.
+Use INSTALL_SCRIPT on pfrom, to avoid striping it.
 
---- appl/push/Makefile.in.orig	Thu May 25 14:36:00 2000
-+++ appl/push/Makefile.in	Thu May 25 14:37:58 2000
-@@ -15,6 +15,7 @@
+--- appl/push/Makefile.in	2001/06/21 15:21:02	1.10.16.1
++++ appl/push/Makefile.in	2001/08/01 16:09:26	1.10.16.3
+@@ -17,6 +17,7 @@
  LD_FLAGS = @LD_FLAGS@
  INSTALL = @INSTALL@
  INSTALL_PROGRAM = @INSTALL_PROGRAM@
-+INSTALL_SCRIPT = ${INSTALL_PROGRAM:C/-s//}
++INSTALL_SCRIPT = @INSTALL_SCRIPT@
  LIBS = @LIB_hesiod@ @LIBS@
  LIB_DBM = @LIB_DBM@
  MKINSTALLDIRS = @top_srcdir@/mkinstalldirs
-@@ -49,7 +50,7 @@
- install: all
- 	$(MKINSTALLDIRS) $(DESTDIR)$(bindir)
+@@ -29,12 +30,14 @@
+ transform=@program_transform_name@
+ EXECSUFFIX=@EXECSUFFIX@
+ 
+-bin_PROGRAMS		= pfrom
++bin_SCRIPTS		= pfrom
+ 
+ libexec_PROGRAMS	= push$(EXECSUFFIX)
+ 
+-PROGRAMS		= $(libexec_PROGRAMS) $(bin_PROGRAMS)
++PROGRAMS		= $(libexec_PROGRAMS)
+ 
++SCRIPTS			= $(bin_SCRIPTS)
++
+ push_SOURCES		= push.c
+ 
+ push_OBJECTS		= push.o
+@@ -43,7 +46,7 @@
+ 
+ OBJECTS			= $(push_OBJECTS)
+ 
+-all: $(PROGRAMS)
++all: $(PROGRAMS) $(SCRIPTS)
+ 
+ .c.o:
+ 	$(CC) -c $(DEFS) -I../../include -I$(srcdir) $(CFLAGS) $(CPPFLAGS) $<
+@@ -53,6 +56,9 @@
  	for x in $(bin_PROGRAMS); do \
--	  $(INSTALL_PROGRAM) $$x $(DESTDIR)$(bindir)/`echo $$x | sed '$(transform)'`; \
-+	  $(INSTALL_SCRIPT) $$x $(DESTDIR)$(bindir)/`echo $$x | sed '$(transform)'`; \
+ 	  $(INSTALL_PROGRAM) $$x $(DESTDIR)$(bindir)/`echo $$x | sed '$(transform)'`; \
  	done
++	for x in $(bin_SCRIPTS); do \
++	  $(INSTALL_SCRIPT) $$x $(DESTDIR)$(bindir)/`echo $$x | sed '$(transform)'`; \
++	done
  	$(MKINSTALLDIRS) $(DESTDIR)$(libexecdir)
  	for x in $(libexec_PROGRAMS); do \
+ 	  $(INSTALL_PROGRAM) $$x $(DESTDIR)$(libexecdir)/`echo $$x | sed '$(transform)'`; \
+@@ -62,6 +68,9 @@
+ 	for x in $(bin_PROGRAMS); do \
+ 	  rm -f $(DESTDIR)$(bindir)/`echo $$x | sed '$(transform)'`; \
+ 	done
++	for x in $(bin_SCRIPTS); do \
++	  rm -f $(DESTDIR)$(bindir)/`echo $$x | sed '$(transform)'`; \
++	done
+ 	for x in $(libexec_PROGRAMS); do \
+ 	  rm -f $(DESTDIR)$(libexecdir)/`echo $$x | sed '$(transform)'`; \
+ 	done
+@@ -72,7 +81,7 @@
+ check:
+ 
+ clean:
+-	rm -f *.a *.o $(PROGRAMS)
++	rm -f *.a *.o $(PROGRAMS) $(SCRIPTS)
+ 
+ mostlyclean: clean
+ 
diff --git a/security/kth-krb4/patches/patch-af b/security/kth-krb4/patches/patch-af
deleted file mode 100644
index 41c10a2af75..00000000000
--- a/security/kth-krb4/patches/patch-af
+++ /dev/null
@@ -1,36 +0,0 @@
-$NetBSD: patch-af,v 1.2 2000/06/08 13:53:26 wennmach Exp $
-
-Do not try to strip scripts.
-
---- appl/kx/Makefile.in.orig	Thu May 25 14:47:35 2000
-+++ appl/kx/Makefile.in	Thu May 25 14:56:51 2000
-@@ -18,6 +18,7 @@
- LD_FLAGS = @LD_FLAGS@
- INSTALL = @INSTALL@
- INSTALL_PROGRAM = @INSTALL_PROGRAM@
-+INSTALL_SCRIPT = ${INSTALL_PROGRAM:C/-s//}
- LN_S = @LN_S@
- LIBS = $(XLIBS) @LIBS@
- MKINSTALLDIRS = @top_srcdir@/mkinstalldirs
-@@ -37,6 +38,8 @@
- X_PROGS_LIBEXEC = kxd$(EXECSUFFIX)
- 
- PROG_BIN	= @MAKE_X_PROGS_BIN@
-+PROG_REALBIN	= kx$(EXECSUFFIX)
-+PROG_SCRIPT	= rxterm rxtelnet tenletxr
- PROG_LIBEXEC	= @MAKE_X_PROGS_LIBEXEC@
- PROGS = $(PROG_BIN) $(PROG_LIBEXEC)
- 
-@@ -62,8 +65,11 @@
- 
- install: all
- 	$(MKINSTALLDIRS) $(DESTDIR)$(bindir) $(DESTDIR)$(libexecdir)
--	PROG_BIN='$(PROG_BIN)'; for x in $$PROG_BIN; do \
-+	PROG_REALBIN='$(PROG_REALBIN)'; for x in $$PROG_REALBIN; do \
- 	  $(INSTALL_PROGRAM) $$x $(DESTDIR)$(bindir)/`echo $$x | sed '$(transform)'`; \
-+	done
-+	PROG_SCRIPT='$(PROG_SCRIPT)'; for x in $$PROG_SCRIPT; do \
-+	  $(INSTALL_SCRIPT) $$x $(DESTDIR)$(bindir)/`echo $$x | sed '$(transform)'`; \
- 	done
- 	PROG_LIBEXEC='$(PROG_LIBEXEC)'; for x in $$PROG_LIBEXEC; do \
- 	  $(INSTALL_PROGRAM) $$x $(DESTDIR)$(libexecdir)/`echo $$x | sed '$(transform)'`; \
diff --git a/security/kth-krb4/pkg/MESSAGE b/security/kth-krb4/pkg/MESSAGE
index a291d383b71..e25252c59e8 100644
--- a/security/kth-krb4/pkg/MESSAGE
+++ b/security/kth-krb4/pkg/MESSAGE
@@ -1,5 +1,5 @@
 ===============================================================================
-$NetBSD: MESSAGE,v 1.3 2001/01/29 11:34:41 wiz Exp $
+$NetBSD: MESSAGE,v 1.4 2001/08/02 12:46:50 wennmach Exp $
 
 Kth-krb4 now has been installed on your system.
 
@@ -10,7 +10,8 @@ ${PREFIX}/share/examples/kth-krb4.
 
 At a minimum, to configure a Kerberos client, copy 
 ${PREFIX}/share/examples/kth-krb4/{krb.conf,krb.realms} to /etc and
-customize them. Also, apply the patches provided in services.diff to
-/etc/services.
+customize them. Also, apply the patches provided in services-1.4.2.diff
+(for NetBSD-1.4.2) or services-1.5.diff (for NetBSD-1.5/1.5.1) 
+to /etc/services.
 
 ===============================================================================
diff --git a/security/kth-krb4/pkg/PLIST b/security/kth-krb4/pkg/PLIST
index c41ba33fa34..71a6fffb794 100644
--- a/security/kth-krb4/pkg/PLIST
+++ b/security/kth-krb4/pkg/PLIST
@@ -1,8 +1,9 @@
-@comment $NetBSD: PLIST,v 1.3 2001/04/12 14:53:40 wennmach Exp $
+@comment $NetBSD: PLIST,v 1.4 2001/08/02 12:46:50 wennmach Exp $
 share/examples/kth-krb4/inetd.conf.changes
 share/examples/kth-krb4/krb.conf
 share/examples/kth-krb4/krb.realms
-share/examples/kth-krb4/services.diff
+share/examples/kth-krb4/services-1.4.2.diff
+share/examples/kth-krb4/services-1.5.diff
 @dirrm share/examples/kth-krb4
 include/acl.h
 include/com_err.h
@@ -17,11 +18,15 @@ include/krb-protos.h
 include/krb-archaeology.h
 include/krb_db.h
 include/ktypes.h
+include/md4.h
+include/md5.h
 include/otp.h
 include/prot.h
+include/sha.h
 include/sl.h
 include/krb_err.h
 include/kadm_err.h
+include/rc4.h
 include/roken.h
 include/roken-common.h
 include/ss/ss.h
@@ -67,6 +72,8 @@ bin/kip
 bin/ftp
 bin/telnet
 libexec/kerberos
+libexec/kip-join-network
+libexec/kipd-control
 libexec/kpropd
 libexec/kprop
 libexec/kadmind