- online man pages   

SunOS man pages : kpasswd (1)

User Commands                                          kpasswd(1)


kpasswd - change a user's Kerberos password


/usr/bin/kpasswd [ principal ]


The kpasswd command is used to change a Kerberos principal's password. kpasswd prompts for the current Kerberos password, which is used to obtain a changepw ticket from the KDC for the user's Kerberos realm. If kpasswd successfully obtains the changepw ticket, the user is prompted twice for the new password, and the password is changed. If the principal is governed by a policy that specifies the length and/or number of character classes required in the new password, the new password must conform to the policy. (The five character classes are lower case, upper case, numbers, punctuation, and all other characters.)


The following operand is supported: principal change the password for the Kerberos principal princi- pal. Otherwise, the principal is derived from the identity of the user invoking the kpasswd command.


/tmp/ovsec_adm.xxxxxx temporary credentials cache for the lifetime of the password changing operation. (xxxxxx is a random string.)


See attributes(5) for descriptions of the following attri- butes: ____________________________________________________________ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | |_____________________________|_____________________________| | Availability | SUNWcsu | |_____________________________|_____________________________| | CSI | Enabled | |_____________________________|_____________________________|




SunOS 5.8 Last change: 17 Nov 1999 1 User Commands kpasswd(1) Kerberos privacy support must be installed on the local machine for kpasswd to work. kpasswd requires that the Ker- beros GSS plug-in module with privacy support be installed on the local machine. Currently this is only available on the Solaris encryption kit CD (due to import/export restric- tions on DES for encryption purposes). This support is in SUNWk5pk and SUNWk5pu packages.


If kpasswd is suspended, the changepw tickets may not be destroyed. SunOS 5.8 Last change: 17 Nov 1999 2