X-Git-Url: https://git.eyrie.org/?a=blobdiff_plain;f=TODO;h=19e6b97cdaef19081d344e514b6193cea06b6c69;hb=refs%2Fheads%2Fdebian%2Fsqueeze;hp=0f7a92921184f55d1d2575bf30fc5861a1fc81a1;hpb=87b62148306f4d9375630a84a0bc2bbaa7cb1d42;p=kerberos%2Fkrb5-strength.git diff --git a/TODO b/TODO index 0f7a929..19e6b97 100644 --- a/TODO +++ b/TODO @@ -1,20 +1,19 @@ krb5-strength To-Do List - * Offer the option of building with a system CrackLib library instead of - the embedded one. This should come with better documentation of the - modifications made to the embedded CrackLib and what problems one may - encounter using an unmodified version. - - * Update to CrackLib 2, which is currently shipped in Debian. This + * Update to CrackLib 2.9, which is currently shipped in Debian. This requires testing to confirm that the on-disk data format is still the same. - * Feed back modifications to CrackLib 2 to allow a program to use a - custom set of rules, which would allow us to stop embedding our own - copy of CrackLib customized to add additional rules. + * Feed back modifications to CrackLib to allow a program to use a custom + set of rules, which would allow us to stop embedding our own copy of + CrackLib customized to add additional rules. + + * Do something useful with errors when parsing numeric arguments from + krb5.conf configuration or failing to allocate memory when getting + string arguments. - * The kadmind patch needs to abort kadmind startup if the plugin could - not be loaded, or at least needs to reject every password. + * Use the realm of the principal changing its password to determine the + krb5.conf configuration rather than always using the default realm. - * Use a better method to determine 8-bit, 16-bit, and 32-bit types for - CrackLib. + * Refactor the tests for configuration errors in the heimdal-strength + test suite into JSON.