The attached patch adds checks for maximum number of consecutive characters of the same class and checks for words from the GECOS field of passwd entry. It also drops the obsolete and unused difignore option and updates the documentation accordingly. The option is still recognized for backwards compatibility, just ignored. OK to commit? -- Tomas Mraz No matter how far down the wrong road you've gone, turn back. Turkish proverb