X-Git-Url: https://git.eyrie.org/?a=blobdiff_plain;f=TODO;h=19e6b97cdaef19081d344e514b6193cea06b6c69;hb=refs%2Fheads%2Fdebian%2Fsqueeze;hp=b4ee9c3647b867648a9247798adc0cf8774b507b;hpb=9fd2cfa87ccbd40e463711ec66b1ce5e609edc2a;p=kerberos%2Fkrb5-strength.git diff --git a/TODO b/TODO index b4ee9c3..19e6b97 100644 --- a/TODO +++ b/TODO @@ -1,17 +1,19 @@ krb5-strength To-Do List - * Offer the option of building with a system CrackLib library instead of - the embedded one. This should come with better documentation of the - modifications made to the embedded CrackLib and what problems one may - encounter using an unmodified version. - - * Update to CrackLib 2, which is currently shipped in Debian. This + * Update to CrackLib 2.9, which is currently shipped in Debian. This requires testing to confirm that the on-disk data format is still the same. - * Feed back modifications to CrackLib 2 to allow a program to use a - custom set of rules, which would allow us to stop embedding our own - copy of CrackLib customized to add additional rules. + * Feed back modifications to CrackLib to allow a program to use a custom + set of rules, which would allow us to stop embedding our own copy of + CrackLib customized to add additional rules. + + * Do something useful with errors when parsing numeric arguments from + krb5.conf configuration or failing to allocate memory when getting + string arguments. + + * Use the realm of the principal changing its password to determine the + krb5.conf configuration rather than always using the default realm. - * The kadmind patch needs to abort kadmind startup if the plugin could - not be loaded, or at least needs to reject every password. + * Refactor the tests for configuration errors in the heimdal-strength + test suite into JSON.