Starting with Oracle Solaris 11.1, some of the password state transitions that were not allowed in Oracle Solaris 11 have been restored for authorized users. Specifically, the following password state transitions are now allowed with the passwd command:
Assigning a password to a non UNIX authentication account using passwd username.
Conversion of an account that has a password directly to a non UNIX authentication account.
Ability to manually lock and unlock an account that is in a non UNIX authentication state. In this case, the passwd –sa command shows NL for the account.
These password state transitions were supported in previous Oracle Solaris releases other than Oracle Solaris 11.
For more information, see the passwd (1) man page.