diff -up bind-9.3.4-P1/bin/named/zoneconf.c.rh457932 bind-9.3.4-P1/bin/named/zoneconf.c
--- bind-9.3.4-P1/bin/named/zoneconf.c.rh457932	2008-09-03 13:53:51.000000000 +0200
+++ bind-9.3.4-P1/bin/named/zoneconf.c	2008-09-03 13:56:54.000000000 +0200
@@ -150,6 +150,10 @@ configure_zone_ssutable(const cfg_obj_t 
 			mtype = DNS_SSUMATCHTYPE_WILDCARD;
 		else if (strcasecmp(str, "self") == 0)
 			mtype = DNS_SSUMATCHTYPE_SELF;
+		else if (strcasecmp(str, "krb5-self") == 0)
+			mtype = DNS_SSUMATCHTYPE_SELFKRB5;
+		else if (strcasecmp(str, "krb5-subdomain") == 0)
+			mtype = DNS_SSUMATCHTYPE_SUBDOMAINKRB5;
 		else
 			INSIST(0);
 
diff -up bind-9.3.4-P1/lib/isccfg/namedconf.c.rh457932 bind-9.3.4-P1/lib/isccfg/namedconf.c
--- bind-9.3.4-P1/lib/isccfg/namedconf.c.rh457932	2008-09-03 13:38:36.000000000 +0200
+++ bind-9.3.4-P1/lib/isccfg/namedconf.c	2008-09-03 13:40:47.000000000 +0200
@@ -227,7 +227,8 @@ static cfg_type_t cfg_type_mode = {
 };
 
 static const char *matchtype_enums[] = {
-	"name", "subdomain", "wildcard", "self", NULL };
+	"name", "subdomain", "wildcard", "self", "krb5-self", "krb5-subdomain",
+	NULL };
 static cfg_type_t cfg_type_matchtype = {
 	"matchtype", cfg_parse_enum, cfg_print_ustring, cfg_doc_enum, &cfg_rep_string,
 	&matchtype_enums