Kerberos Password Sniffing

[Sam Hartman]

>>>>> "Paul" == Paul Vixie <vixie at as.vix.com> writes:

    Paul> jis at mit.edu ("Jeffrey I. Schiller") writes:
    >> This is why it is essential to have a password quality
    >> enforcement step as part of the change password process.

    Paul> i agree.  that's why i'm surprised that mit's kadmind
    Paul> doesn't ship with one.  -- Paul Vixie

MIT's kadmind ships with password quality rules that you can enable,
including support for checking against a dictionary, minimum lengths,
and minimum character class stuff.