diff --git a/lib/asn1/krb5.asn1 b/lib/asn1/krb5.asn1
index 13cc21bc0..370f6d809 100644
--- a/lib/asn1/krb5.asn1
+++ b/lib/asn1/krb5.asn1
@@ -65,6 +65,10 @@ PADATA-TYPE ::= INTEGER {
 	KRB5-PADATA-GET-FROM-TYPED-DATA(22),
 	KRB5-PADATA-SAM-ETYPE-INFO(23),
 	KRB5-PADATA-SERVER-REFERRAL(25),
+	KRB5-PADATA-ALT-PRINC(24),		-- (crawdad@fnal.gov)
+	KRB5-PADATA-SAM-CHALLENGE2(30),		-- (kenh@pobox.com)
+	KRB5-PADATA-SAM-RESPONSE2(31),		-- (kenh@pobox.com)
+	KRB5-PA-EXTRA-TGT(41)			-- Reserved extra TGT
 	KRB5-PADATA-TD-KRB-PRINCIPAL(102),	-- PrincipalName
 	KRB5-PADATA-PK-TD-TRUSTED-CERTIFIERS(104), -- PKINIT
 	KRB5-PADATA-PK-TD-CERTIFICATE-INDEX(105), -- PKINIT
@@ -78,16 +82,16 @@ PADATA-TYPE ::= INTEGER {
 						-- the asCheckSum in the
 						--  PK-AS-REP
 	KRB5-PADATA-CLIENT-CANONICALIZED(133),	-- referals
-	KRB5-PADATA-FX-COOKIE(133)		-- draft-ietf-krb-wg-preauth-framework
-	KRB5-PADATA-AUTHENTICATION-SET(134)	-- draft-ietf-krb-wg-preauth-framework
-	KRB5-PADATA-AUTH-SET-SELECTED(135)	-- draft-ietf-krb-wg-preauth-framework
-	KRB5-PADATA-FX-FAST(136)		-- draft-ietf-krb-wg-preauth-framework
-	KRB5-PADATA-FX-ERROR(137)		-- draft-ietf-krb-wg-preauth-framework
-	KRB5-PADATA-ENCRYPTED-CHALLENGE(138)	-- draft-ietf-krb-wg-preauth-framework
-	KRB5-PADATA-OTP-CHALLENGE(141)		-- (gareth.richards@rsa.com)
-	KRB5-PADATA-OTP-REQUEST(142)		-- (gareth.richards@rsa.com)
-	KBB5-PADATA-OTP-CONFIRM(143)		-- (gareth.richards@rsa.com)
-	KRB5-PADATA-OTP-PIN-CHANGE(144)		-- (gareth.richards@rsa.com)
+	KRB5-PADATA-FX-COOKIE(133),		-- krb-wg-preauth-framework
+	KRB5-PADATA-AUTHENTICATION-SET(134),	-- krb-wg-preauth-framework
+	KRB5-PADATA-AUTH-SET-SELECTED(135),	-- krb-wg-preauth-framework
+	KRB5-PADATA-FX-FAST(136),		-- krb-wg-preauth-framework
+	KRB5-PADATA-FX-ERROR(137),		-- krb-wg-preauth-framework
+	KRB5-PADATA-ENCRYPTED-CHALLENGE(138),	-- krb-wg-preauth-framework
+	KRB5-PADATA-OTP-CHALLENGE(141),		-- (gareth.richards@rsa.com)
+	KRB5-PADATA-OTP-REQUEST(142),		-- (gareth.richards@rsa.com)
+	KBB5-PADATA-OTP-CONFIRM(143),		-- (gareth.richards@rsa.com)
+	KRB5-PADATA-OTP-PIN-CHANGE(144),	-- (gareth.richards@rsa.com)
 	KRB5-PADATA-EPAK-AS-REQ(145),
 	KRB5-PADATA-EPAK-AS-REP(146),
 	KRB5-PADATA-SUPPORTED-ETYPES(165)	-- MS-KILE