New upstream version 3.2

[kerberos/krb5-strength.git] / tools / heimdal-strength.1

diff --git a/tools/heimdal-strength.1 b/tools/heimdal-strength.1
index 0b3751ddeb0a00c3a96ea79f0767def2eddb410a..c4c750a3fa508f52f074d80704447823be22014c 100644 (file)
--- a/tools/heimdal-strength.1
+++ b/tools/heimdal-strength.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man 2.27 (Pod::Simple 3.28)
+.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35)
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -46,7 +46,7 @@
 .ie \n(.g .ds Aq \(aq
 .el       .ds Aq '
 .\"
-.\" If the F register is turned on, we'll generate index entries on stderr for
+.\" If the F register is >0, we'll generate index entries on stderr for
 .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
 .\" entries marked with X<> in POD.  Of course, you'll have to process the
 .\" output yourself in some meaningful fashion.
@@ -56,12 +56,12 @@
 ..
 .nr rF 0
 .if \n(.g .if rF .nr rF 1
-.if (\n(rF:(\n(.g==0)) \{
-.    if \nF \{
+.if (\n(rF:(\n(.g==0)) \{\
+.    if \nF \{\
 .        de IX
 .        tm Index:\\$1\t\\n%\t"\\$2"
 ..
-.        if !\nF==2 \{
+.        if !\nF==2 \{\
 .            nr % 0
 .            nr F 2
 .        \}
@@ -133,7 +133,7 @@
 .\" ========================================================================
 .\"
 .IX Title "HEIMDAL-STRENGTH 1"
-.TH HEIMDAL-STRENGTH 1 "2014-03-25" "3.0" "krb5-strength"
+.TH HEIMDAL-STRENGTH 1 "2020-05-17" "3.2" "krb5-strength"
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -151,7 +151,7 @@ with CrackLib, checked against a \s-1CDB\s0 database of known weak passwords,
 checked for length, checked for non-printable or non-ASCII characters that
 may be difficult to enter reproducibly, required to contain particular
 character classes, or any combination of these tests.  It is normally run
-via \fIkpasswdd\fR\|(8) using the Heimdal password quality check interface rather
+via \fBkpasswdd\fR\|(8) using the Heimdal password quality check interface rather
 than directly.
 .PP
 To use this program, it must be configured in \fIkrb5.conf\fR via settings
@@ -187,6 +187,15 @@ exit with a non-zero status.
 .SH "CONFIGURATION"
 .IX Header "CONFIGURATION"
 The following \fIkrb5.conf\fR configuration options are supported:
+.IP "cracklib_maxlen" 4
+.IX Item "cracklib_maxlen"
+Normally, all passwords are checked with CrackLib if a CrackLib dictionary
+is defined.  However, CrackLib's rules were designed for a world in which
+most passwords were four to eight characters long, and tends to spuriously
+reject a lot of passphrases.  If this option is set to something other
+than its default of 0, passwords longer than that length bypass CrackLib
+checks.  (Using a SQLite dictionary for longer passwords is strongly
+recommended.)
 .IP "minimum_different" 4
 .IX Item "minimum_different"
 If set to a numeric value, passwords with fewer than this number of unique
@@ -304,24 +313,28 @@ may be helpful in combination with passphrases; users may choose a stock
 English phrase, and this will force at least some additional complexity.
 .SH "SEE ALSO"
 .IX Header "SEE ALSO"
-\&\fIkrb5\-strength\-wordlist\fR\|(1), \fIkadm5\-strength\fR\|(3), \fIkpasswdd\fR\|(8), \fIkrb5.conf\fR\|(5)
+\&\fBkrb5\-strength\-wordlist\fR\|(1), \fBkadm5\-strength\fR\|(3), \fBkpasswdd\fR\|(8), \fBkrb5.conf\fR\|(5)
 .PP
 The \*(L"Password changing\*(R" section of the Heimdal info documentation
 describes the interface that this program implements and how to configure
 Heimdal to use it.
 .PP
 The current version of this program is available from its web page at
-<http://www.eyrie.org/~eagle/software/krb5\-strength/> as part of the
+<https://www.eyrie.org/~eagle/software/krb5\-strength/> as part of the
 krb5\-strength package.
 .SH "AUTHOR"
 .IX Header "AUTHOR"
 Russ Allbery <eagle@eyrie.org>
 .SH "COPYRIGHT AND LICENSE"
 .IX Header "COPYRIGHT AND LICENSE"
-Copyright 2010, 2013, 2014 The Board of Trustees of the Leland Stanford
+Copyright 2016 Russ Allbery <eagle@eyrie.org>
+.PP
+Copyright 2010, 2013\-2014 The Board of Trustees of the Leland Stanford
 Junior University
 .PP
 Copying and distribution of this file, with or without modification, are
 permitted in any medium without royalty provided the copyright notice and
 this notice are preserved.  This file is offered as-is, without any
 warranty.
+.PP
+SPDX-License-Identifier: \s-1FSFAP\s0