System Administration Guide: Naming and Directory Services (NIS+)

nistbladm Command

The nistbladm command allows you to create, change, and display information about any NIS+ table, including the passwd table.

Caution – Caution –

To perform password operations using the nistbladm command you must apply nistbladm to the shadow column of the passwd table. Applying nistbladm to the shadow column is complex and tricky. Therefore, you should not use the nistbladm command for any operation that can more easily be performed by the passwd command or by using the Solaris Management Console tools.

Use the passwd command or Solaris Management Console tools to perform the following operations:

It is possible to use the nistbladm command to:

nistbladm and NIS+ Shadow Column Fields

You use the nistbladm command to set password parameters by specifying the values of the different fields in the shadow column. These fields are entered in the format:

Diagram shows format for fields in shadow column


Caution – Caution –

When using nistbladm on the shadow column of the password table, all of the numeric fields must contain appropriate values. You cannot leave a field blank, or enter a zero, as a no change placeholder.

For example, to specify that the user amy last changed her password on day 9246 (May 1, 1995), cannot change her password until it has been in use for 7 days, must change her password after 30 days, will be warned to change her password after 25 days, must not remain inactive more than 15 days, and has an account that will expire on day number 9285, you would type:

nistbladm -m shadow=9246:7:30:5:15:9285 [name=amy],

nistbladm and the Number of Days Password Parameter in NIS+

Most password aging parameters are expressed in number of days.

The following principles and rules apply:

Values are entered in both the Lastchange and the Expire fields as a number of days since January 1, 1970, as in the following.

Table 16–2 Number of Days Since 1/1/70 Password Parameter in NIS+


Day Number 

January 1, 1970 

January 2, 1970 

January 2, 1971 


January 1, 1997