policy character classes

[Greg Hudson]

On 08/20/2012 08:01 AM, Paul DiSciascio wrote:
> Is there
> a way to disable the fifth class, or specifically require each of the
> first four?

No, the policy system isn't particularly flexible, and there are no
configuration options for that.

> Is there another way to tackle this or is there something that I'm
> missing here?

Starting in 1.9, we have a plugin interface for password quality.  As
with our other plugin interfaces, using it requires writing C code.  If
that's an option for you, there are more details at:

  http://web.mit.edu/kerberos/krb5-current/doc/krb_plugindev/pwqual.html