Add dependabot configuration

[kerberos/krb5-strength.git] / tools / heimdal-strength.pod

diff --git a/tools/heimdal-strength.pod b/tools/heimdal-strength.pod
index 7a4ddd75c5ca105c32f580884be9f3fc0f49fc10..eab8d0f8f99cdd7b8f7691f22211f7c5ebf681bf 100644 (file)
--- a/tools/heimdal-strength.pod
+++ b/tools/heimdal-strength.pod
@@ -1,6 +1,7 @@
 =for stopwords
 heimdal-strength Heimdal CrackLib krb5-strength Allbery CDB
 canonicalization krb5-strength-wordlist reproducibly
+SPDX-License-Identifier FSFAP
 
 =head1 NAME
 
@@ -54,6 +55,23 @@ The following F<krb5.conf> configuration options are supported:
 
 =over 4
 
+=item cracklib_maxlen
+
+Normally, all passwords are checked with CrackLib if a CrackLib dictionary
+is defined.  However, CrackLib's rules were designed for a world in which
+most passwords were four to eight characters long, and tends to spuriously
+reject a lot of passphrases.  If this option is set to something other
+than its default of 0, passwords longer than that length bypass CrackLib
+checks.  (Using a SQLite dictionary for longer passwords is strongly
+recommended.)
+
+=item minimum_different
+
+If set to a numeric value, passwords with fewer than this number of unique
+characters will be rejected.  This can be used to reject, for example,
+passwords that are long strings of the same character or repetitions of
+small numbers of characters, which may be too easy to guess.
+
 =item minimum_length
 
 If set to a numeric value, passwords with fewer than that number of
@@ -175,7 +193,7 @@ describes the interface that this program implements and how to configure
 Heimdal to use it.
 
 The current version of this program is available from its web page at
-L<http://www.eyrie.org/~eagle/software/krb5-strength/> as part of the
+L<https://www.eyrie.org/~eagle/software/krb5-strength/> as part of the
 krb5-strength package.
 
 =head1 AUTHOR
@@ -184,7 +202,9 @@ Russ Allbery <eagle@eyrie.org>
 
 =head1 COPYRIGHT AND LICENSE
 
-Copyright 2010, 2013, 2014 The Board of Trustees of the Leland Stanford
+Copyright 2016 Russ Allbery <eagle@eyrie.org>
+
+Copyright 2010, 2013-2014 The Board of Trustees of the Leland Stanford
 Junior University
 
 Copying and distribution of this file, with or without modification, are
@@ -192,4 +212,6 @@ permitted in any medium without royalty provided the copyright notice and
 this notice are preserved.  This file is offered as-is, without any
 warranty.
 
+SPDX-License-Identifier: FSFAP
+
 =cut