policy character classes
Greg Hudson
ghudson at MIT.EDU
Mon Aug 20 15:16:29 EDT 2012
On 08/20/2012 08:01 AM, Paul DiSciascio wrote:
> Is there
> a way to disable the fifth class, or specifically require each of the
> first four?
No, the policy system isn't particularly flexible, and there are no
configuration options for that.
> Is there another way to tackle this or is there something that I'm
> missing here?
Starting in 1.9, we have a plugin interface for password quality. As
with our other plugin interfaces, using it requires writing C code. If
that's an option for you, there are more details at:
http://web.mit.edu/kerberos/krb5-current/doc/krb_plugindev/pwqual.html
More information about the Kerberos
mailing list