configure
  Automagically define HAVE_NEW_DB.

documentation
  Write info on how to setup a server, slave server, clients and
  machines supporting incoming telnet, rsh etc.

telnet
  Make telnet (telnetd already does this) warn when encryption is not
  activated.
  If local policy is hostname without domainname DISPLAY is not exported
  correctly.

su login
  Add option -p so that ksu -p bg.admin would be possible
  Login might be used to remove other users ticket files.

kpasswd & kadmin
  Should do password quality checking. Kpasswd checks what can't be 
  checked in kadmind (min length, gcos info etc.) Kadmind passes the
  new deskey via a pipe to an external program that verifies the 
  password against a dictionary of forbidden passwords, pass the
  principals name as argument to the program so that it is not
  possible to have the principla or its reverse as password (and
  variations on this).
 
ksrvutil
  Fix it so that it can make new srvtabs on the target host.

rshd
  Add iruserok from (*)BSD so that rshd can be used as ordinary rshd.

  There is also an -l option to rshd if you want to disallow the use
  of users ~/.rhosts files. If you decide to support old rsh consider
  adding the -l option of this rshd.

  Encryption without secondary port is bugged, it currently does no
  encryption.

rcp
  Fix encryption option in rcp.

rlogind
  When there is time include rlogind daemon, in the mean time tell
  users to use telnet instead. Low priority.
