diff --git a/lib/krb5/verify_krb5_conf.c b/lib/krb5/verify_krb5_conf.c
index 9b017d2cb..0b1773e50 100644
--- a/lib/krb5/verify_krb5_conf.c
+++ b/lib/krb5/verify_krb5_conf.c
@@ -401,6 +401,10 @@ struct entry libdefaults_entries[] = {
     { "v4_name_convert", krb5_config_list, v4_name_convert_entries },
     { "verify_ap_req_nofail", krb5_config_string, check_boolean },
     { "pkinit-openssl-engine", krb5_config_string, NULL },
+    { "max_retries", krb5_config_string, check_time },
+    { "renew_lifetime", krb5_config_string, check_time },
+    { "proxiable", krb5_config_string, check_boolean },
+    { "warn_pwexpire", krb5_config_string, check_time },
     /* MIT stuff */
     { "permitted_enctypes", krb5_config_string, mit_entry },
     { "default_tgs_enctypes", krb5_config_string, mit_entry },
@@ -411,6 +415,8 @@ struct entry libdefaults_entries[] = {
 struct entry appdefaults_entries[] = {
     { "afslog", krb5_config_string, check_boolean },
     { "afs-use-524", krb5_config_string, check_524 },
+    { "encrypt", krb5_config_string, check_boolean },
+    { "forward", krb5_config_string, check_boolean },
     { "forwardable", krb5_config_string, check_boolean },
     { "proxiable", krb5_config_string, check_boolean },
     { "ticket_lifetime", krb5_config_string, check_time },
@@ -491,7 +497,7 @@ struct entry kdc_entries[] = {
     { "enable-kaserver", krb5_config_string, check_boolean },
     { "encode_as_rep_as_tgs_rep", krb5_config_string, check_boolean },
     { "kdc_warn_pwexpire", krb5_config_string, check_time },
-    { "use_2b", krb5_config_string, check_boolean },
+    { "use_2b", krb5_config_list, NULL },
     { "enable-pkinit", krb5_config_string, check_boolean },
     { "pki-identity", krb5_config_string, NULL },
     { "pki-anchors", krb5_config_string, NULL },