version 1.25, 2003/06/10 09:12:11 |
version 1.26, 2003/07/25 09:58:45 |
|
|
.\" This should really be: passwd [-l] [-y] [-k [-n name] [-i instance] [-r realm] [-u username[.instance][@realm]]] [user] |
.\" This should really be: passwd [-l] [-y] [-k [-n name] [-i instance] [-r realm] [-u username[.instance][@realm]]] [user] |
.Sh DESCRIPTION |
.Sh DESCRIPTION |
.Nm |
.Nm |
changes the user's local, KerberosIV, KerberosV, or YP password. |
changes the user's local, Kerberos, or YP password. |
First, the user is prompted for their current password. |
First, the user is prompted for their current password. |
If the current password is correctly typed, a new password is requested. |
If the current password is correctly typed, a new password is requested. |
The new password must be entered twice to avoid typing errors. |
The new password must be entered twice to avoid typing errors. |
|
|
.Xr rpc.yppasswdd 8 |
.Xr rpc.yppasswdd 8 |
daemon should be running on the YP master server. |
daemon should be running on the YP master server. |
.It Fl k |
.It Fl k |
Forces the change to affect the KerberosIV database, even |
Forces the change to affect the Kerberos database, even |
if the user has a password in the local database. |
if the user has a password in the local database. |
Once the password has been verified, |
Once the password has been verified, |
.Nm |
.Nm |
communicates the new password information to the KerberosIV authenticating host. |
communicates the new password information to the Kerberos authenticating host. |
.El |
.El |
.Pp |
.Pp |
The following flags are only used when the |
The following flags are only used when the |
|
|
.Ar realm |
.Ar realm |
instead of the local realm. |
instead of the local realm. |
.It Fl u Ar username[.instance][@realm] |
.It Fl u Ar username[.instance][@realm] |
Specifies a fully qualified KerberosIV principal. |
Specifies a fully qualified Kerberos principal. |
.It Fl K Ar principal@REALM |
.It Fl K Ar principal@REALM |
Changes a users KerberosV password. |
Changes a user's Kerberos password. |
.El |
.El |
.Pp |
.Pp |
This is the behavior if no flags are specified: |
This is the behavior if no flags are specified: |
if KerberosIV is active then |
if Kerberos is active then |
.Nm |
.Nm |
will talk to the KerberosIV server (even if the user has an entry |
will talk to the Kerberos server (even if the user has an entry |
in the local database). |
in the local database). |
If the password is not in the local password database, then |
If the password is not in the local password database, then |
an attempt is made to use the YP database. |
an attempt is made to use the YP database. |
.Pp |
.Pp |
To change another user's KerberosIV password, one must first run |
To change another user's Kerberos password, one must first run |
.Xr kinit 1 |
.Xr kinit 1 |
followed by |
followed by |
.Nm passwd . |
.Nm passwd . |
|
|
.El |
.El |
.Sh SEE ALSO |
.Sh SEE ALSO |
.Xr chpass 1 , |
.Xr chpass 1 , |
.Xr kerberos 1 , |
|
.Xr kinit 1 , |
.Xr kinit 1 , |
.Xr login 1 , |
.Xr login 1 , |
.Xr login.conf 5 , |
.Xr login.conf 5 , |