Format: 1.8
Date: Mon, 07 Oct 2013 18:56:49 -0700
Source: krb5-strength
Binary: krb5-strength
Architecture: source i386
Version: 2.0-1
Distribution: unstable
Urgency: low
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
krb5-strength - Password strength checking for Kerberos KDCs
Closes: 725753
Changes:
krb5-strength (2.0-1) unstable; urgency=low
.
* Initial upload to Debian. (Closes: #725753)
* New upstream release.
- Add native support for the MIT Kerberos password quality plugin
interface included in MIT Kerberos 1.9 and later.
- Stop building the Heimdal plugin. Heimdal prefers using an external
check program anyway.
- Add support for TinyCDB dictionaries with a simpler dictionary
lookup algorithm. This allows use of this package to check
passwords against a large, fast dictionary with a minimum of
permutations as an alternative or supplement to the extensive
permutations tested by CrackLib.
- Minimum password length can now be enforced directly through
configuration of this module without relying on CrackLib.
- New boolean settings require_ascii_printable and require_non_letter
to reject passwords with non-ASCII or non-printable characters and
to require passwords contain at least one non-letter (and
non-space).
- The plugin and external checking program will now run without a
dictionary configured so that they can be used only to check length
and the lighter character restrictions if so desired.
- When checking for passwords based on the principal, also check each
component of the principal to find passwords based on the realm.
* Eliminate the heimdal-strength package. krb5-strength now builds a
single binary package of the same name including the MIT plugin and
the Heimdal external password quality program. The Heimdal plugin is
not built by the Debian packaging because Heimdal prefers external
programs. The plugin can be added later as a separate package if
there is demand.
* Revise the package long description for the merger of krb5-strength
and heimdal-strength and the new capabilities in 2.0.
* Recommend cracklib-runtime and tinycdb since they are required to
build dictionaries. Downgrade krb5-admin-server to Enhances and add
heimdal-kdc.
* Update debhelper compatibility level to V9.
- Enable hardening flags, including bindnow and PIE.
- Enable parallel builds.
* Use dh-autoreconf to rebuild the build system during package builds.
* Use xz compression for the upstream and Debian tarballs.
* Add branch information to the Vcs-Git metadata.
* Update standards version to 3.9.4 (no changes required).
* Rewrite debian/copyright in copyright-format 1.0.
* Remove README.Debian. All of that information is now available in the
installed upstream README file.
* Remove Bugs header now that this package is in Debian proper.
Checksums-Sha1:
b63ddf5d06c2c3c327f145cc7c6fb43c53edc185 1243 krb5-strength_2.0-1.dsc
a3bc55f68bb88b117f2d673d69f095d963b9453f 323780 krb5-strength_2.0.orig.tar.xz
a91374bedbeea4bd8c4d131fbfd4b8f055de4e86 5964 krb5-strength_2.0-1.debian.tar.xz
8f6aa736f8f87bd94f16568dd7250b513d26faf1 35574 krb5-strength_2.0-1_i386.deb
Checksums-Sha256:
a9516ae64af67da179fe674cf376f7b9f7498071b11a450407b4d4bb7dd32785 1243 krb5-strength_2.0-1.dsc
d6286352212841c10b632e73ba24d26a6b4528aed95b29773666536a1eedf7c2 323780 krb5-strength_2.0.orig.tar.xz
1a2632bd74b7dce292a49ebfcf0e664bd2e7eb6080c401e8361dbf39b08c1403 5964 krb5-strength_2.0-1.debian.tar.xz
4a5e1e33f46ba093d2171c233b801cccb16e23f3d9168866594c54f1a766280b 35574 krb5-strength_2.0-1_i386.deb
Files:
f9cbfcdfcf5162ee1ed666b22091c005 1243 net extra krb5-strength_2.0-1.dsc
52e48e2dc192ca4c303e37d28ec132f4 323780 net extra krb5-strength_2.0.orig.tar.xz
cfe1bd8074d9cc2cf02aebcd93420f56 5964 net extra krb5-strength_2.0-1.debian.tar.xz
1cceac7848ed12558dfc3da203e0712f 35574 net extra krb5-strength_2.0-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
projects / kerberos / krb5-strength.git / tag