86 lines
1.9 KiB
Groff
86 lines
1.9 KiB
Groff
.\" $Id: kpasswd.1,v 1.2 1996/06/12 21:29:21 bg Exp $
|
|
.\" Copyright 1989 by the Massachusetts Institute of Technology.
|
|
.\"
|
|
.\" For copying and distribution information,
|
|
.\" please see the file <mit-copyright.h>.
|
|
.\"
|
|
.TH KPASSWD 1 "Kerberos Version 4.0" "MIT Project Athena"
|
|
.FM mit
|
|
.SH NAME
|
|
kpasswd \- change a user's Kerberos password
|
|
.SH SYNOPSIS
|
|
.B kpasswd
|
|
[
|
|
.B \-h
|
|
] [
|
|
.B \-n
|
|
.I name
|
|
] [
|
|
.B \-i
|
|
.I instance
|
|
] [
|
|
.B \-r
|
|
.I realm
|
|
] [
|
|
\-u
|
|
.IR username[.instance][@realm] ]
|
|
.SH DESCRIPTION
|
|
The
|
|
.I kpasswd
|
|
command is used to change a Kerberos principal's password.
|
|
.PP
|
|
If the
|
|
.I \-h
|
|
option is specified, a brief summary of the options is printed, and
|
|
.I kpasswd
|
|
then exits.
|
|
.PP
|
|
If the
|
|
.I \-n
|
|
option is specified,
|
|
.I name
|
|
is used as the principal name rather than the username of the user
|
|
running
|
|
.IR kpasswd .
|
|
(This is determined from the ticket file if it exists;
|
|
otherwise, it is determined from the unix user id.)
|
|
.PP
|
|
If the
|
|
.I \-i
|
|
option is specified,
|
|
.I instance
|
|
is used as the instance rather than a null instance.
|
|
.PP
|
|
If the
|
|
.I \-r
|
|
option is specified,
|
|
.I realm
|
|
is used as the realm rather than the local realm.
|
|
.PP
|
|
If the
|
|
.I \-u
|
|
option is specified, a fully qualified kerberos
|
|
principal can be given.
|
|
.PP
|
|
|
|
The utility prompts for the current Kerberos password (printing
|
|
the name of the principal for which it intends to change the password),
|
|
which is verified by the Kerberos server. If the old password is
|
|
correct, the user is prompted twice for the new password. A message is
|
|
printed indicating the success or failure of the password changing
|
|
operation.
|
|
|
|
.SH BUGS
|
|
|
|
.I kpasswd
|
|
does not handle names, instances, or realms with special
|
|
characters in them when the -n, -i, or -r options are used. Any
|
|
valid fullname is accepted, however, if the -u option is used.
|
|
|
|
If the principal whose password you are trying to change does
|
|
not exist, you will not be told until after you have entered the
|
|
old password.
|
|
|
|
.SH SEE ALSO
|
|
kerberos(1), kinit(1), passwd(1), kadmin(8)
|