Add dependabot configuration

[kerberos/krb5-strength.git] / tools / heimdal-strength.pod

diff --git a/tools/heimdal-strength.pod b/tools/heimdal-strength.pod
index 422f3a186ec7a1fa6ea18027800bdfcfb5e34db2..eab8d0f8f99cdd7b8f7691f22211f7c5ebf681bf 100644 (file)
--- a/tools/heimdal-strength.pod
+++ b/tools/heimdal-strength.pod
@@ -1,6 +1,7 @@
 =for stopwords
 heimdal-strength Heimdal CrackLib krb5-strength Allbery CDB
-canonicalization cdbmake-wordlist reproducibly
+canonicalization krb5-strength-wordlist reproducibly
+SPDX-License-Identifier FSFAP
 
 =head1 NAME
 
@@ -54,6 +55,23 @@ The following F<krb5.conf> configuration options are supported:
 
 =over 4
 
+=item cracklib_maxlen
+
+Normally, all passwords are checked with CrackLib if a CrackLib dictionary
+is defined.  However, CrackLib's rules were designed for a world in which
+most passwords were four to eight characters long, and tends to spuriously
+reject a lot of passphrases.  If this option is set to something other
+than its default of 0, passwords longer than that length bypass CrackLib
+checks.  (Using a SQLite dictionary for longer passwords is strongly
+recommended.)
+
+=item minimum_different
+
+If set to a numeric value, passwords with fewer than this number of unique
+characters will be rejected.  This can be used to reject, for example,
+passwords that are long strings of the same character or repetitions of
+small numbers of characters, which may be too easy to guess.
+
 =item minimum_length
 
 If set to a numeric value, passwords with fewer than that number of
@@ -168,14 +186,14 @@ English phrase, and this will force at least some additional complexity.
 
 =head1 SEE ALSO
 
-cdbmake-wordlist(1), kadm5-strength(3), kpasswdd(8), krb5.conf(5)
+krb5-strength-wordlist(1), kadm5-strength(3), kpasswdd(8), krb5.conf(5)
 
 The "Password changing" section of the Heimdal info documentation
 describes the interface that this program implements and how to configure
 Heimdal to use it.
 
 The current version of this program is available from its web page at
-L<http://www.eyrie.org/~eagle/software/krb5-strength/> as part of the
+L<https://www.eyrie.org/~eagle/software/krb5-strength/> as part of the
 krb5-strength package.
 
 =head1 AUTHOR
@@ -184,7 +202,9 @@ Russ Allbery <eagle@eyrie.org>
 
 =head1 COPYRIGHT AND LICENSE
 
-Copyright 2010, 2013, 2014 The Board of Trustees of the Leland Stanford
+Copyright 2016 Russ Allbery <eagle@eyrie.org>
+
+Copyright 2010, 2013-2014 The Board of Trustees of the Leland Stanford
 Junior University
 
 Copying and distribution of this file, with or without modification, are
@@ -192,4 +212,6 @@ permitted in any medium without royalty provided the copyright notice and
 this notice are preserved.  This file is offered as-is, without any
 warranty.
 
+SPDX-License-Identifier: FSFAP
+
 =cut