krb5-strength 0.3 released

Russ Allbery rra at stanford.edu
Fri Mar 23 21:39:32 EDT 2007


I'm pleased to announce the first public release of the krb5-strength
toolkit.

krb5-strength is a toolkit for checking the strength of passwords against
an external dictionary, applying more transforms and checks than kadmind
supports by default.  It is implemented as a patch to kadmind and a plugin
module that is called on each password change.  It embeds a slightly
modified copy of Alec Muffett's CrackLib to do the password checking.

You can download it from:

    <http://www.eyrie.org/~eagle/software/krb5-strength/>

This should be considered beta software.  It is not (yet) used anywhere in
production.  The long-term goal is to add a plugin interface to kadmind
suitable for running a strength checking hook so that this package can
simply provide the loadable module.  In the meantime, I wanted to make it
available in case anyone is interested.

Please let me know of any problems or feature requests not already listed
in the TODO file.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the Kerberos mailing list