version 1.12, 2000/08/01 22:30:53 |
version 1.13, 2000/10/17 18:52:18 |
|
|
.Op Ar user |
.Op Ar user |
.\" This should really be: passwd [-l] [-y] [-k [-n name] [-i instance] [-r realm] [-u username[.instance][@realm]]] [user] |
.\" This should really be: passwd [-l] [-y] [-k [-n name] [-i instance] [-r realm] [-u username[.instance][@realm]]] [user] |
.Sh DESCRIPTION |
.Sh DESCRIPTION |
.Nm passwd |
.Nm |
changes the user's local, Kerberos, or YP password. |
changes the user's local, Kerberos, or YP password. |
First, the user is prompted for their current password. |
First, the user is prompted for their current password. |
If the current password is correctly typed, a new password is |
If the current password is correctly typed, a new password is requested. |
requested. |
|
The new password must be entered twice to avoid typing errors. |
The new password must be entered twice to avoid typing errors. |
.Pp |
.Pp |
The new password should be at least six characters long and not |
The new password should be at least six characters long and not |
|
|
Its total length must be less than |
Its total length must be less than |
.Dv _PASSWORD_LEN |
.Dv _PASSWORD_LEN |
(currently 128 characters). |
(currently 128 characters). |
Numbers, upper case letters and meta-characters |
A mixture of both lower and uppercase letters, numbers, and |
are encouraged. |
meta-characters is encouraged. |
.Pp |
.Pp |
The quality of the password can be enforced by providing an external |
The quality of the password can be enforced by providing an external |
checking program in |
checking program in |
|
|
The options are as follows: |
The options are as follows: |
.Bl -tag -width flag |
.Bl -tag -width flag |
.It Fl l |
.It Fl l |
Causes the password to be updated only in the local |
Causes the password to be updated only in the local password file. |
password file. |
|
When changing only the local password, |
When changing only the local password, |
.Xr pwd_mkdb 8 |
.Xr pwd_mkdb 8 |
is used to update the password databases. |
is used to update the password databases. |
|
|
Forces the change to affect the Kerberos database, even |
Forces the change to affect the Kerberos database, even |
if the user has a password in the local database. |
if the user has a password in the local database. |
Once the password has been verified, |
Once the password has been verified, |
.Nm passwd |
.Nm |
communicates the new password information to |
communicates the new password information to the Kerberos authenticating host. |
the Kerberos authenticating host. |
|
.El |
.El |
.Pp |
.Pp |
The following flags are only used when the |
The following flags are only used when the |
|
|
.Pp |
.Pp |
This is the behavior if no flags are specified: |
This is the behavior if no flags are specified: |
if Kerberos is active then |
if Kerberos is active then |
.Nm passwd |
.Nm |
will talk to the Kerberos server (even if the user has an entry |
will talk to the Kerberos server (even if the user has an entry |
in the local database). |
in the local database). |
If the password is not in the local password database, then |
If the password is not in the local password database, then |
an attempt is made to use the YP database. |
an attempt is made to use the YP database. |
.Pp |
.Pp |
To change another user's Kerberos password, one must first |
To change another user's Kerberos password, one must first run |
run |
|
.Xr kinit 1 |
.Xr kinit 1 |
followed by |
followed by |
.Xr passwd 1 . |
.Xr passwd 1 . |
|
|
depends on the configuration in |
depends on the configuration in |
.Xr passwd.conf 5 . |
.Xr passwd.conf 5 . |
It can be different for local and YP passwords. |
It can be different for local and YP passwords. |
|
.Sh DIAGNOSTICS |
|
.Bl -diag |
|
.It "the passwd file is busy" |
|
The password file is currently locked by another process, or a |
|
process previously holding the lock was prematurely terminated. |
|
In the latter case, it is safe to remove the |
|
.Pa /etc/ptmp |
|
file to get rid of this error. |
.Sh FILES |
.Sh FILES |
.Bl -tag -width /etc/master.passwd -compact |
.Bl -tag -width /etc/master.passwd -compact |
.It Pa /etc/master.passwd |
.It Pa /etc/master.passwd |
|
|
temporary copy of the password file |
temporary copy of the password file |
.It /etc/passwd.conf |
.It /etc/passwd.conf |
configuration options |
configuration options |
|
.It /etc/ptmp |
|
lock file for the passwd database |
.El |
.El |
.Sh SEE ALSO |
.Sh SEE ALSO |
.Xr chpass 1 , |
.Xr chpass 1 , |
|
|
.Re |
.Re |
.Sh HISTORY |
.Sh HISTORY |
A |
A |
.Nm passwd |
.Nm |
command appeared in |
command appeared in |
.At v6 . |
.At v6 . |