KPASSWD(1)

NAME
kpasswd - change a user's Kerberos password

SYNOPSIS
kpasswd [ -h ] [ -n name ] [ -i instance ] [ -r realm ] [ -u username[.instance][@realm]]

DESCRIPTION
The kpasswd command is used to change a Kerberos principal's password.

If the -h option is specified, a brief summary of the options is printed, and kpasswd then exits.

If the -n option is specified, name is used as the principal name rather than the username of the user running kpasswd. (This is determined from the ticket file if it exists; otherwise, it is determined from the unix user id.)

If the -i option is specified, instance is used as the instance rather than a null instance.

If the -r option is specified, realm is used as the realm rather than the local realm.

If the -u option is specified, a fully qualified kerberos principal can be given.

The utility prompts for the current Kerberos password (printing the name of the principal for which it intends to change the password), which is verified by the Kerberos server. If the old password is correct, the user is prompted twice for the new password. A message is printed indicating the success or failure of the password changing operation.

BUGS
kpasswd does not handle names, instances, or realms with special characters in them when the -n, -i, or -r options are used. Any valid fullname is accepted, however, if the -u option is used. If the principal whose password you are trying to change does not exist, you will not be told until after you have entered the old password.

SEE ALSO
kerberos(1), kinit(1), passwd(1), kadmin(8)