another (different) KDC name resolution question

Russ Allbery rra at stanford.edu
Mon Feb 22 23:46:31 EST 2010


Tom Yu <tlyu at MIT.EDU> writes:
> Russ Allbery <rra at stanford.edu> writes:

>> See also:
>>
>>     http://www.eyrie.org/~eagle/software/krb5-strength/
>>
>> which does the same thing except its embedded copy of CrackLib has
>> stronger rules, since we found Jack the Ripper could guess passwords
>> passed by CrackLib.
>>
>> Marcus Watts has a much-improved libkadm5srv patch than the one included
>> in that package.

> Is there a recent pointer to this patch by Marcus Watts?

Marcus sent me one privately.  I think it's generally available, but I'm
not sure he's mentioned it in public, so I'll leave him to decide whether
to send a pointer.  (Copied.)

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the Kerberos mailing list