kpasswd

 

---

 
 
 
 User Commands                                          kpasswd(1)
 
 
 


NAME
      kpasswd - change a user's Kerberos password
 


SYNOPSIS
      /usr/bin/kpasswd [ principal ]
 


DESCRIPTION
      The kpasswd command is used to change a Kerberos principal's
      password. kpasswd prompts for the current Kerberos password,
      which is used to obtain a changepw ticket from the  KDC  for
      the  user's Kerberos realm.  If kpasswd successfully obtains
      the changepw ticket, the user is prompted twice for the  new
      password, and the password is changed.
 
      If the principal is governed by a policy that specifies  the
      length  and/or  number  of character classes required in the
      new password, the new password must conform to  the  policy.
      (The  five  character  classes  are  lower case, upper case,
      numbers, punctuation, and all other characters.)
 


OPERANDS
      The following operand is supported:
 
      principal
            change the password for the Kerberos principal princi-
            pal.  Otherwise,  the  principal  is  derived from the
            identity of the user invoking the kpasswd command.
 


FILES
      /tmp/ovsec_adm.xxxxxx
            temporary credentials cache for the  lifetime  of  the
            password  changing  operation.  (xxxxxx  is  a  random
            string.)
 


ATTRIBUTES
      See attributes(5) for descriptions of the  following  attri-
      butes:
 
      ____________________________________________________________
     |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
     |_____________________________|_____________________________|
     | Availability                | SUNWcsu                     |
     |_____________________________|_____________________________|
     | CSI                         | Enabled                     |
     |_____________________________|_____________________________|
 
 


SEE ALSO
      SEAM(5)
 


NOTES
 
 
 
 
 SunOS 5.8           Last change: 17 Nov 1999                    1
 
 
 
 
 
 
 User Commands                                          kpasswd(1)
 
 
 
      Kerberos privacy support must  be  installed  on  the  local
      machine  for kpasswd to work. kpasswd requires that the Ker-
      beros GSS plug-in module with privacy support  be  installed
      on  the  local  machine. Currently this is only available on
      the Solaris encryption kit CD (due to import/export restric-
      tions  on  DES  for encryption purposes). This support is in
      SUNWk5pk and SUNWk5pu packages.
 
 BUGS
      If kpasswd is suspended, the  changepw tickets  may  not  be
      destroyed.
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 SunOS 5.8           Last change: 17 Nov 1999                    2
 
 
 

---