pwqual builtin plugins not working
ghudson at MIT.EDU
Wed May 15 01:34:43 EDT 2013
On 05/15/2013 12:58 AM, David Shrimpton wrote:
> Adding "princ" and "dict" pwqual plugin settings to krb5.conf
Built-in modules are always registered and don't need to be specifically
enabled, though they can be disabled. That could probably be made
clearer in the documentation.
> doesn't appear to stop the principal name or dictionary words
> being set as password using 'kadmin cpw'
For consistency with historical behavior, the princ and dict modules
only apply to principals with a password policy. It doesn't matter
what's in the policy object, just that the association is there.
More information about the Kerberos