1 krb5-strength (2.0-1) UNRELEASED; urgency=low
3 * New upstream release.
4 - Add native support for the MIT Kerberos password quality plugin
5 interface included in MIT Kerberos 1.9 and later.
6 - Stop building the Heimdal plugin. Heimdal prefers using an external
8 - Add support for TinyCDB dictionaries with a simpler dictionary
9 lookup algorithm. This allows use of this package to check
10 passwords against a large, fast dictionary with a minimum of
11 permutations as an alternative or supplement to the extensive
12 permutations tested by CrackLib.
13 - Minimum password length can now be enforced directly through
14 configuration of this module without relying on CrackLib.
15 - New boolean settings require_ascii_printable and require_non_letter
16 to reject passwords with non-ASCII or non-printable characters and
17 to require passwords contain at least one non-letter (and
19 - The plugin and external checking program will now run without a
20 dictionary configured so that they can be used only to check length
21 and the lighter character restrictions if so desired.
22 - When checking for passwords based on the principal, also check each
23 component of the principal to find passwords based on the realm.
24 * Eliminate the heimdal-strength package. krb5-strength now builds a
25 single binary package of the same name including the MIT plugin and
26 the Heimdal external password quality program. The Heimdal plugin is
27 not built by the Debian packaging because Heimdal prefers external
28 programs. The plugin can be added later as a separate package if
30 * Revise the package long description for the merger of krb5-strength
31 and heimdal-strength and the new capabilities in 2.0.
32 * Recommend cracklib-runtime and tinycdb since they are required to
33 build dictionaries. Downgrade krb5-admin-server to Enhances and add
36 -- Russ Allbery <rra@debian.org> Mon, 07 Oct 2013 16:30:08 -0700
38 krb5-strength (1.1-1) unstable; urgency=low
40 * New upstream release.
41 - Increase minimum password length to 8.
42 - Reject passwords formed from the username with digits appended.
43 - Reject duplicated dictionary words.
44 - Fix variable sizes on 64-bit platforms.
45 * Add a Bugs header directing bug reports to me personally.
46 * Update to debhelper compatibility level V8.
47 * Switch to Debian source package format 3.0 (quilt) with a custom local
49 * Update standards version to 3.9.3 (no changes required).
51 -- Russ Allbery <rra@debian.org> Fri, 11 May 2012 15:03:11 -0700
53 krb5-strength (1.0-1) unstable; urgency=low
55 * New upstream release.
56 - Add an external password strength program for Heimdal.
57 - Add a plugin for the Heimdal password strength support.
58 * Create a separate heimdal-strength package containing only the
59 external password check program for Heimdal. The Heimdal version of
60 the libkadm5srv plugin isn't packaged for the time being.
61 * Update debhelper compatibility mode to V7.
62 - Use debhelper rule minimization with overrides.
63 - Add ${misc:Depends} to dependencies.
64 * Add Homepage, Vcs-Git, and Vcs-Browser control fields.
66 * Update standards version to 3.8.4 (no changes required).
68 -- Russ Allbery <rra@debian.org> Tue, 16 Feb 2010 22:47:35 -0800
70 krb5-strength (0.5-1) unstable; urgency=low
72 * New upstream release.
73 - More checks for passwords based on the principal.
75 -- Russ Allbery <rra@debian.org> Wed, 18 Jul 2007 23:16:37 -0700
77 krb5-strength (0.3-1) unstable; urgency=low
79 * New upstream release with a different name.
80 - Many cleanups to the code and build system.
81 - Unnecessary differences from CrackLib removed.
82 - Some Debian CrackLib patches applied for robustness.
83 * Updated README.Debian with a better example kdc.conf entry.
84 * No longer install the packer binary. We can use the one from
87 -- Russ Allbery <rra@debian.org> Fri, 23 Mar 2007 15:27:50 -0700
89 krb5-passwd-strength (0.2-1) unstable; urgency=low
93 -- Russ Allbery <rra@debian.org> Thu, 22 Jun 2006 15:07:03 -0700