[Heimdal-source-changes] [heimdal/heimdal] c89d3f: kadmin: allow enforcing password quality on admin ...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: c89d3f3b8c1a908c7bb4573f93258d2d469a7fe8
      https://github.com/heimdal/heimdal/commit/c89d3f3b8c1a908c7bb4573f93258d2d469a7fe8
  Author: Luke Howard <lukeh at padl.com>
  Date:   2018-12-26 (Wed, 26 Dec 2018)

  Changed paths:
    M doc/setup.texi
    M kadmin/server.c
    M kpasswd/kpasswdd.c
    M lib/krb5/verify_krb5_conf.c
    M tests/kdc/check-kadmin.in
    M tests/ldap/check-ldap.in

  Log Message:
  -----------
  kadmin: allow enforcing password quality on admin password change

This patch adds the "enforce_on_admin_set" configuration knob in the
[password_quality] section. When this is enabled, administrative password
changes via the kadmin or kpasswd protocols will be subject to password quality
checks. (An administrative password change is one where the authenticating
principal is different to the principal whose password is being changed.)

Note that kadmin running in local mode (-l) is unaffected by this patch.



      **NOTE:** This service has been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/

      Functionality will be removed from GitHub.com on January 31st, 2019.