Fix the -s flag to heimdal-history (alternate quality checker)

[kerberos/krb5-strength.git] / NEWS

diff --git a/NEWS b/NEWS
index 4c3b208100d6241738d31232c161ad76c2a5c6b3..3acab414c3c8bc917f6821087bc5de5c42a11025 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,20 @@
                     User-Visible krb5-strength Changes
 
+krb5-strength 3.0 (unreleased)
+
+    A password history implementation for Heimdal is now included.  This
+    is a separate Perl program, heimdal-history, that stacks with the
+    external program implementation of strength checking.  It is not
+    available in the form of a plugin, only as a Heimdal external password
+    quality check.  (MIT Kerberos provides its own password history
+    mechanism.)  This program has more extensive Perl module dependencies
+    than the other programs in this distribution.
+
+    A new configuration option, minimum_different, can be set to require
+    that passwords contain at least that many unique characters.  This can
+    be used to reject long strings of identical characters or short
+    patterns, which may pass other checks but still be too easy to guess.
+
 krb5-strength 2.2 (2013-12-16)
 
     More complex character class requirements can be specified with the