]> eyrie.org Git - kerberos/krb5-strength.git/blobdiff - debian/README.Debian
* New upstream release with a different name.
[kerberos/krb5-strength.git] / debian / README.Debian
index 7b3cf1feab71fd26999c2c4b46d3d16a2624cbc8..57726e93ad741feb0706753227002a184f02c8d9 100644 (file)
@@ -9,24 +9,24 @@ With that code, a sample kdc.conf file using this plugin looks like:
 
 [realms]
     EXAMPLE.ORG = {
-        database_name = /usr/local/var/krb5kdc/principal
-        admin_keytab = FILE:/usr/local/var/krb5kdc/kadm5.keytab
-        acl_file = /usr/local/var/krb5kdc/kadm5.acl
-        key_stash_file = /usr/local/var/krb5kdc/stash
+        database_name = /var/lib/krb5kdc/principal
+        admin_keytab = FILE:/etc/krb5kdc/kadm5.keytab
+        acl_file = /etc/krb5kdc/kadm5.acl
+        key_stash_file = /etc/krb5kdc/stash
         kdc_ports = 750,88
         max_life = 10h 0m 0s
         max_renewable_life = 7d 0h 0m 0s
         default_principal_flags = +preauth
-        pwcheck_plugin = /usr/local/var/krb5kdc/kadmin_plugin.so
-        dict_file = /usr/local/var/krb5kdc/dict
+        pwcheck_plugin = /usr/lib/kadmind/passwd_strength.so
+        dict_file = /usr/lib/kadmind/dictionary
     }
 
-dict_file is a prefix for cracklib dicts you have now, e.g.
-/usr/local/var/krb5kdc/dict.pwd, .pwi, etc.
+dict_file is a prefix for the CrackLib dictionary files.  You can generate
+those files using the utilities in cracklib-runtime.
 
 You will need to have any policy apply to the principal in order for this
 module to be enforced, as a result of how kadmin works (if there is no
 policy applying either by default or to the principal, password quality is
 not checked).
 
- -- Russ Allbery <rra@debian.org>, Sat, 24 Jun 2006 18:31:34 z
+ -- Russ Allbery <rra@debian.org>, Fri, 23 Mar 2007 15:23:43 z