diff --git a/lib/hdb/hdb.asn1 b/lib/hdb/hdb.asn1
index 371c660f5..47c846186 100644
--- a/lib/hdb/hdb.asn1
+++ b/lib/hdb/hdb.asn1
@@ -12,12 +12,12 @@ hdb-pw-salt	INTEGER	::= 3
 hdb-afs3-salt	INTEGER	::= 10
 
 Salt ::= SEQUENCE {
-	type[0]		INTEGER,
+	type[0]		INTEGER (0..4294967295),
 	salt[1]		OCTET STRING
 }
 
 Key ::= SEQUENCE {
-	mkvno[0]	INTEGER OPTIONAL,	-- master key version number
+	mkvno[0]	INTEGER (0..4294967295) OPTIONAL, -- master key version number
 	key[1]		EncryptionKey,
 	salt[2]		Salt OPTIONAL
 }
@@ -45,25 +45,25 @@ HDBFlags ::= BIT STRING {
 }
 
 GENERATION ::= SEQUENCE {
-	time[0]		KerberosTime,	-- timestamp
-	usec[1]		INTEGER,	-- microseconds
-	gen[2]		INTEGER		-- generation number
+	time[0]		KerberosTime,			-- timestamp
+	usec[1]		INTEGER (0..4294967295),	-- microseconds
+	gen[2]		INTEGER (0..4294967295)		-- generation number
 }
 
 hdb_entry ::= SEQUENCE {
 	principal[0]	Principal  OPTIONAL, -- this is optional only 
 					     -- for compatibility with libkrb5
-	kvno[1]		INTEGER,
+	kvno[1]		INTEGER (0..4294967295),
 	keys[2]		SEQUENCE OF Key,
 	created-by[3]	Event,
 	modified-by[4]	Event OPTIONAL,
 	valid-start[5]	KerberosTime OPTIONAL,
 	valid-end[6]	KerberosTime OPTIONAL,
 	pw-end[7]	KerberosTime OPTIONAL,
-	max-life[8]	INTEGER OPTIONAL,
-	max-renew[9]	INTEGER OPTIONAL,
+	max-life[8]	INTEGER (0..4294967295) OPTIONAL,
+	max-renew[9]	INTEGER (0..4294967295) OPTIONAL,
 	flags[10]	HDBFlags,
-	etypes[11]	SEQUENCE OF INTEGER OPTIONAL,
+	etypes[11]	SEQUENCE OF INTEGER (0..4294967295) OPTIONAL,
 	generation[12]	GENERATION OPTIONAL
 }