kpasswd(1)

NAME | SYNOPSIS | DESCRIPTION | OPERANDS | FILES | ATTRIBUTES | SEE ALSO | NOTES | BUGS

NAME

kpasswd- change a user's Kerberos password

SYNOPSIS

/usr/bin/kpasswd [principal]

DESCRIPTION

The kpasswd command is used to change a Kerberos principal's password. kpasswd prompts for the current Kerberos password, which is used to obtain a changepw ticket from the KDC for the user's Kerberos realm. If kpasswd successfully obtains the changepw ticket, the user is prompted twice for the new password, and the password is changed.

If the principal is governed by a policy that specifies the length and/or number of character classes required in the new password, the new password must conform to the policy. (The five character classes are lower case, upper case, numbers, punctuation, and all other characters.)

OPERANDS

The following operand is supported:

principal

change the password for the Kerberos principal principal. Otherwise, the principal is derived from the identity of the user invoking the kpasswd command.

FILES

/tmp/ovsec_adm.xxxxxx

temporary credentials cache for the lifetime of the password changing operation. (xxxxxx is a random string.)

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWcsu
CSI	Enabled

SEE ALSO

SEAM(5)

NOTES

Kerberos privacy support must be installed on the local machine for kpasswd to work. kpasswd requires that the Kerberos GSS plug-in module with privacy support be installed on the local machine. Currently this is only available on the Solaris encryption kit CD (due to import/export restrictions on DES for encryption purposes). This support is in SUNWk5pk and SUNWk5pu packages.

BUGS

If kpasswd is suspended, the changepw tickets may not be destroyed.

SunOS 5.8  Last Revised 17 Nov 1999

NAME | SYNOPSIS | DESCRIPTION | OPERANDS | FILES | ATTRIBUTES | SEE ALSO | NOTES | BUGS