[5192] in Kerberos
password checker candidate
daemon@ATHENA.MIT.EDU (Jim Miller)
Wed May 17 19:04:45 1995
From: jim@bilbo.suite.com (Jim Miller)
Date: Wed, 17 May 95 17:51:03 -0500
To: kerberos@MIT.EDU
Reply-To: Jim_Miller@bilbo.suite.com
I spent a few day looking around for a password checker that could be
dropped into Kerberos and found a good candidate. It is the main password
checking function in the 'npasswd' package.
'npasswd' is a drop-in replacement for the UNIX 'passwd' utility.
'npasswd' is configurable and can perform dictionary tests and simple
lexical tests. It has been designed in a modular fashion and the password
checking function (checkpasswd) can be easily extracted and utilized by
Kerberos. The author of 'npasswd' has already gone to the trouble of
putting 'checkpasswd' and its support functions in its own separate
library.
I think it would be easy to modify the KRB5, beta 4 'adm5_change' function
to call 'checkpasswd' after the call to 'adm_negotiate_key'. (I haven't
looked at KRB5 beta 5, so I don't know the name of the equivalent function
in the new beta 5 admin utility.)
'npasswd' can be FTP'ed from the follows sites (among others)
------------
Host ee.utah.edu (128.110.8.42)
Last updated 06:09 16 May 1995
Location: /admin/passwd
DIRECTORY drwxrwxr-x 1024 bytes 17:31 11 May 1995 npasswd
Host ftp.cc.utexas.edu (128.83.40.1)
Last updated 06:41 17 May 1995
Location: /pub
DIRECTORY drwxrwxr-x 512 bytes 10:05 21 Mar 1995 npasswd
Host ftp.sunet.se (130.238.127.3)
Last updated 07:22 17 May 1995
Location: /pub/security/tools/password
DIRECTORY drwxrwxr-x 8192 bytes 21:58 9 Mar 1995 npasswd
------------
Since I'm not working directly with Kerberos, but with a commercial
product derived from Kerberos, I wont be making the modifications
necessary to integrate 'checkpasswd' with Kerberos, but I thought I would
mention 'checkpasswd' to the list in case there is somebody out there who
would want to do the integration.
Jim_Miller@suite.com
