test

System Administration Guide: Security Services

Examples—Changing Your Password

In the following example, user david changes both his UNIX password and Kerberos password with passwd. 


% passwd
	passwd:  Changing password for david
	Enter login (NIS+) password:         <type the current UNIX password>
	New password:                        <type the new UNIX password>
	Re-enter password:                   <confirm the new UNIX password>
	Old KRB5 password:                   <type the current Kerberos password>
	New KRB5 password:                   <type the new Kerberos password>
	Re-enter new KRB5 password:          <confirm the new Kerberos password>

In the preceding example passwd asks for both the UNIX password and the Kerberos password. However, if try_first_pass is set in the PAM module, the Kerberos password is automatically set to the UNIX password. This is the default configuration. In that case, user david must use kpasswd to set his Kerberos password to something else, as shown next.

This example shows user david changing only his Kerberos password with kpasswd.


% kpasswd
kpasswd: Changing password for david@ENG.EXAMPLE.COM.
Old password:           <type the current Kerberos password>
New password:           <type the new Kerberos password>
New password (again):   <confirm the new Kerberos password>
Kerberos password changed.

In this example, user david changes the password for the Kerberos principal david/admin (which is not a valid UNIX user). He must use kpasswd.


% kpasswd david/admin
kpasswd:  Changing password for david/admin.
Old password:		   	     <type the current Kerberos password>
New password:			       <type the new Kerberos password>
New password (again):	   <type the new Kerberos password>
Kerberos password changed.