fixed passwd dictionary check specification to match reality

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@3394 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/doc/kadm5/api-funcspec.tex b/doc/kadm5/api-funcspec.tex
index 47895ca5cc457ee475604fddb50cb46b7a19c916..ff4eff978d6c3b80f0c3df001f1ef6e434c10a0d 100644 (file)
--- a/doc/kadm5/api-funcspec.tex
+++ b/doc/kadm5/api-funcspec.tex
@@ -846,12 +846,11 @@ ovsec_kadm/changepw service, the modify privilege is disregarded.
 
 Change a principal's password.  
 
-This function enforces password policy and dictionary checks.  If the
-new password specified is in the password dictionary,
-OVSEC_KADM_PASS_DICT is returned (even if the policy bit is not set).
-If the principal's POLICY bit is set in aux_attributes, compliance
-with each of the named policy fields is verified and an appropriate
-error code is returned if verification fails.
+This function enforces password policy and dictionary checks.  If the new
+password specified is in the password dictionary, and the policy bit is set
+OVSEC_KADM_PASS_DICT is returned.  If the principal's POLICY bit is set in
+aux_attributes, compliance with each of the named policy fields is verified
+and an appropriate error code is returned if verification fails.
 
 Note that the policy checks are only be performed if the POLICY bit is
 set in the principal's aux_attributes field.