circumvent password rules defined in kpwvalid

[Bernhard Zeller]

Hallo,

we have password rules defined in kpwvalid. But if I copy 
/usr/afsws/bin/kpasswd to a local directory and execute it from there,
I can circumvent the password rules in kpwvalid.

Any comments?

Thanks, Bernhard

Bernhard Zeller                                 Tel:  +49-6221-59-4492
IBM European Network Center                     Fax:  +49-6221-59-3300
Vangerowstrasse 18                              SMTP: [EMAIL PROTECTED]
D-69115 Heidelberg / Germany                    RSCS: ZELLER at HEIDELBG