--- krb5.spec.orig	2013-07-31 21:02:28.141225784 -0400
+++ krb5.spec	2013-07-31 21:02:49.548225784 -0400
@@ -30,7 +30,7 @@
 Summary: The Kerberos network authentication system
 Name: krb5
 Version: 1.11.3
-Release: 2%{?dist}
+Release: 2%{?dist}.scripts.%{scriptsversion} 
 # Maybe we should explode from the now-available-to-everybody tarball instead?
 # http://web.mit.edu/kerberos/dist/krb5/1.11/krb5-1.11.3-signed.tar
 Source0: krb5-%{version}.tar.gz
@@ -90,6 +90,8 @@
 Patch201: krb5-1.11.2-keycheck.patch
 Patch202: krb5-1.11.2-otp.patch
 
+Patch1000: krb5-kuserok-scripts.patch
+
 License: MIT
 URL: http://web.mit.edu/kerberos/www/
 Group: System Environment/Libraries
@@ -176,6 +178,7 @@
 %package libs
 Summary: The shared libraries used by Kerberos 5
 Group: System Environment/Libraries
+Provides: scripts-krb5-libs, scripts-krb5-libs%{?_isa}
 %if 0%{?rhel} == 6
 # Some of the older libsmbclient builds here incorrectly called
 # krb5_locate_kdc(), which was mistakenly exported in 1.9.
@@ -315,6 +318,7 @@
 
 %patch201 -p1 -b .keycheck
 %patch202 -p1 -b .otp
+%patch1000 -p1 -b .kuserok  
 
 # Take the execute bit off of documentation.
 chmod -x doc/krb5-protocol/*.txt