KPASSWD(1) User Commands KPASSWD(1)
NAME
kpasswd - change a user's Kerberos password
SYNOPSIS
/usr/bin/kpasswd [
principal]
DESCRIPTION
The
kpasswd command is used to change a Kerberos principal's password.
kpasswd prompts for the current Kerberos password, which is used to
obtain a
changepw ticket from the
KDC for the user's Kerberos realm. If
kpasswd successfully obtains the
changepw ticket, the user is prompted
twice for the new password, and the password is changed.
If the principal is governed by a policy that specifies the length and/or
number of character classes required in the new password, the new
password must conform to the policy. (The five character classes are
lower case, upper case, numbers, punctuation, and all other characters.)
OPERANDS
The following operand is supported:
principal Change the password for the Kerberos principal
principal.
Otherwise, the principal is derived from the identity of the
user invoking the
kpasswd command.
FILES
/tmp/ovsec_adm.xxxxxx Temporary credentials cache for the lifetime of
the password changing operation. (
xxxxxx is a
random string.)
ATTRIBUTES
See
attributes(7) for descriptions of the following attributes:
+---------------+-----------------+
|ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+---------------+-----------------+
|CSI | Enabled |
+---------------+-----------------+
SEE ALSO
kerberos(7)BUGS
If
kpasswd is suspended, the
changepw tickets may not be destroyed.
July 30, 2001
KPASSWD(1)