pwqual builtin plugins not working

Greg Hudson ghudson at MIT.EDU
Wed May 15 01:34:43 EDT 2013

On 05/15/2013 12:58 AM, David Shrimpton wrote:
> Adding "princ" and "dict" pwqual plugin settings to krb5.conf

Built-in modules are always registered and don't need to be specifically
enabled, though they can be disabled.  That could probably be made
clearer in the documentation.

> doesn't appear to stop the principal name or dictionary words
> being set as password using 'kadmin cpw'

For consistency with historical behavior, the princ and dict modules
only apply to principals with a password policy.  It doesn't matter
what's in the policy object, just that the association is there.

More information about the Kerberos mailing list