diff --git a/lib/gssapi/krb5/spnego.asn1 b/lib/gssapi/krb5/spnego.asn1
new file mode 100644
index 000000000..fc5b46ec5
--- /dev/null
+++ b/lib/gssapi/krb5/spnego.asn1
@@ -0,0 +1,41 @@
+-- $Id$
+
+SPNEGO DEFINITIONS ::=
+BEGIN
+
+-- NegotiationToken ::= CHOICE {
+--                               negTokenInit  [0]  NegTokenInit,
+--                               negTokenTarg  [1]  NegTokenTarg }
+
+MechType::= OBJECT IDENTIFIER
+
+MechTypeList ::= SEQUENCE OF MechType
+
+ContextFlags ::= BIT STRING {
+        delegFlag       (0),
+        mutualFlag      (1),
+        replayFlag      (2),
+        sequenceFlag    (3),
+        anonFlag        (4),
+        confFlag        (5),
+        integFlag       (6)
+}
+
+NegTokenInit ::= SEQUENCE {
+                            mechTypes       [0] MechTypeList  OPTIONAL,
+                            reqFlags        [1] ContextFlags  OPTIONAL,
+                            mechToken       [2] OCTET STRING  OPTIONAL,
+                            mechListMIC     [3] OCTET STRING  OPTIONAL
+                         }
+
+NegTokenTarg ::= SEQUENCE {
+    negResult      [0] ENUMERATED {
+                            accept_completed    (0),
+                            accept_incomplete   (1),
+                            reject              (2) }          OPTIONAL,
+    supportedMech  [1] MechType                                OPTIONAL,
+    responseToken  [2] OCTET STRING                            OPTIONAL,
+    mechListMIC    [3] OCTET STRING                            OPTIONAL
+}
+
+END
diff --git a/lib/gssapi/spnego.asn1 b/lib/gssapi/spnego.asn1
new file mode 100644
index 000000000..fc5b46ec5
--- /dev/null
+++ b/lib/gssapi/spnego.asn1
@@ -0,0 +1,41 @@
+-- $Id$
+
+SPNEGO DEFINITIONS ::=
+BEGIN
+
+-- NegotiationToken ::= CHOICE {
+--                               negTokenInit  [0]  NegTokenInit,
+--                               negTokenTarg  [1]  NegTokenTarg }
+
+MechType::= OBJECT IDENTIFIER
+
+MechTypeList ::= SEQUENCE OF MechType
+
+ContextFlags ::= BIT STRING {
+        delegFlag       (0),
+        mutualFlag      (1),
+        replayFlag      (2),
+        sequenceFlag    (3),
+        anonFlag        (4),
+        confFlag        (5),
+        integFlag       (6)
+}
+
+NegTokenInit ::= SEQUENCE {
+                            mechTypes       [0] MechTypeList  OPTIONAL,
+                            reqFlags        [1] ContextFlags  OPTIONAL,
+                            mechToken       [2] OCTET STRING  OPTIONAL,
+                            mechListMIC     [3] OCTET STRING  OPTIONAL
+                         }
+
+NegTokenTarg ::= SEQUENCE {
+    negResult      [0] ENUMERATED {
+                            accept_completed    (0),
+                            accept_incomplete   (1),
+                            reject              (2) }          OPTIONAL,
+    supportedMech  [1] MechType                                OPTIONAL,
+    responseToken  [2] OCTET STRING                            OPTIONAL,
+    mechListMIC    [3] OCTET STRING                            OPTIONAL
+}
+
+END