1*5c007436SBen Gras.\" $NetBSD: passwd.1,v 1.28 2006/03/07 01:52:09 hubertf Exp $ 2*5c007436SBen Gras.\" 3*5c007436SBen Gras.\" Copyright (c) 1990, 1993 4*5c007436SBen Gras.\" The Regents of the University of California. All rights reserved. 5*5c007436SBen Gras.\" 6*5c007436SBen Gras.\" Redistribution and use in source and binary forms, with or without 7*5c007436SBen Gras.\" modification, are permitted provided that the following conditions 8*5c007436SBen Gras.\" are met: 9*5c007436SBen Gras.\" 1. Redistributions of source code must retain the above copyright 10*5c007436SBen Gras.\" notice, this list of conditions and the following disclaimer. 11*5c007436SBen Gras.\" 2. Redistributions in binary form must reproduce the above copyright 12*5c007436SBen Gras.\" notice, this list of conditions and the following disclaimer in the 13*5c007436SBen Gras.\" documentation and/or other materials provided with the distribution. 14*5c007436SBen Gras.\" 3. Neither the name of the University nor the names of its contributors 15*5c007436SBen Gras.\" may be used to endorse or promote products derived from this software 16*5c007436SBen Gras.\" without specific prior written permission. 17*5c007436SBen Gras.\" 18*5c007436SBen Gras.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 19*5c007436SBen Gras.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 20*5c007436SBen Gras.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 21*5c007436SBen Gras.\" ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 22*5c007436SBen Gras.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 23*5c007436SBen Gras.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 24*5c007436SBen Gras.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 25*5c007436SBen Gras.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 26*5c007436SBen Gras.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 27*5c007436SBen Gras.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 28*5c007436SBen Gras.\" SUCH DAMAGE. 29*5c007436SBen Gras.\" 30*5c007436SBen Gras.\" from: @(#)passwd.1 8.1 (Berkeley) 6/6/93 31*5c007436SBen Gras.\" 32*5c007436SBen Gras.Dd February 25, 2005 33*5c007436SBen Gras.Dt PASSWD 1 34*5c007436SBen Gras.Os 35*5c007436SBen Gras.Sh NAME 36*5c007436SBen Gras.Nm passwd 37*5c007436SBen Gras.Nd modify a user's password 38*5c007436SBen Gras.Sh SYNOPSIS 39*5c007436SBen Gras.Nm 40*5c007436SBen Gras.Op Ar user 41*5c007436SBen Gras.Nm 42*5c007436SBen Gras.Oo Fl d Ar files | Fl l Oc 43*5c007436SBen Gras.Op Ar user 44*5c007436SBen Gras.Nm 45*5c007436SBen Gras.Oo Fl d Ar nis | Fl y Oc 46*5c007436SBen Gras.Op Ar user 47*5c007436SBen Gras.Nm 48*5c007436SBen Gras.Oo Fl d Ar krb5 | Fl k Oc 49*5c007436SBen Gras.Op Ar principal 50*5c007436SBen Gras.Sh DESCRIPTION 51*5c007436SBen Gras.Nm 52*5c007436SBen Graschanges the user's password. 53*5c007436SBen GrasFirst, the user is 54*5c007436SBen Grasprompted for their current password. 55*5c007436SBen GrasIf the current password is correctly typed, a new password is 56*5c007436SBen Grasrequested. 57*5c007436SBen GrasThe new password must be entered twice to avoid typing errors. 58*5c007436SBen Gras.Pp 59*5c007436SBen GrasThe new password should be at least six characters long and not 60*5c007436SBen Graspurely alphabetic. 61*5c007436SBen GrasIts total length must be less than 62*5c007436SBen Gras.Dv _PASSWORD_LEN 63*5c007436SBen Gras(currently 128 characters). 64*5c007436SBen GrasNumbers, upper case letters and meta characters 65*5c007436SBen Grasare encouraged. 66*5c007436SBen Gras.Pp 67*5c007436SBen GrasAll options may not be available on all systems. 68*5c007436SBen Gras.Bl -tag -width flag 69*5c007436SBen Gras.It Fl d Ar database 70*5c007436SBen GrasThis option specifies the password database that should be updated. The 71*5c007436SBen Grasfollowing databases are supported: 72*5c007436SBen Gras.Bl -tag -width files 73*5c007436SBen Gras.It files 74*5c007436SBen GrasThis specifies that the password change should be applied to the local 75*5c007436SBen Graspassword file. 76*5c007436SBen GrasWhen changing only the local password, 77*5c007436SBen Gras.Nm 78*5c007436SBen Grasuses 79*5c007436SBen Gras.Xr pwd_mkdb 8 80*5c007436SBen Grasto update the password databases. 81*5c007436SBen Gras.It nis 82*5c007436SBen GrasThis specifies that the password change should be applied to the NIS 83*5c007436SBen Graspassword database. 84*5c007436SBen GrasThe 85*5c007436SBen Gras.Xr rpc.yppasswdd 8 86*5c007436SBen Grasdaemon should be running on the master NIS server. 87*5c007436SBen Gras.It krb5 88*5c007436SBen GrasThis specifies that the user's Kerberos 5 password should be changed. 89*5c007436SBen GrasThe host must be configured to use Kerberos. 90*5c007436SBen GrasSee 91*5c007436SBen Gras.Xr krb5.conf 5 . 92*5c007436SBen Gras.El 93*5c007436SBen Gras.It Fl l 94*5c007436SBen GrasThis is the equivalent of 95*5c007436SBen Gras.Fl d Ar files . 96*5c007436SBen Gras.It Fl y 97*5c007436SBen GrasThis is the equivalent of 98*5c007436SBen Gras.Fl d Ar nis . 99*5c007436SBen Gras.It Fl k 100*5c007436SBen GrasThis is the equivalent of 101*5c007436SBen Gras.Fl d Ar krb5 . 102*5c007436SBen Gras.El 103*5c007436SBen Gras.Pp 104*5c007436SBen GrasIf a password database is not specified, 105*5c007436SBen Gras.Nm 106*5c007436SBen Graswill change the password database as determined by the 107*5c007436SBen GrasPluggable Authentication Module 108*5c007436SBen Gras.Pq PAM 109*5c007436SBen Graslibrary. 110*5c007436SBen Gras.Pp 111*5c007436SBen GrasThe type of cipher used to encrypt the password depends on the configuration 112*5c007436SBen Grasin 113*5c007436SBen Gras.Xr passwd.conf 5 . 114*5c007436SBen GrasIt can be different for local and NIS passwords. 115*5c007436SBen Gras.Sh FILES 116*5c007436SBen Gras.Bl -tag -width /etc/master.passwd -compact 117*5c007436SBen Gras.It Pa /etc/master.passwd 118*5c007436SBen GrasThe user database 119*5c007436SBen Gras.It Pa /etc/passwd 120*5c007436SBen GrasA Version 7 format password file 121*5c007436SBen Gras.It Pa /etc/passwd.XXXXXX 122*5c007436SBen GrasTemporary copy of the password file 123*5c007436SBen Gras.El 124*5c007436SBen Gras.Sh SEE ALSO 125*5c007436SBen Gras.Xr chpass 1 , 126*5c007436SBen Gras.Xr login 1 , 127*5c007436SBen Gras.Xr pwhash 1 , 128*5c007436SBen Gras.Xr passwd 5 , 129*5c007436SBen Gras.Xr passwd.conf 5 , 130*5c007436SBen Gras.Xr pam 8 , 131*5c007436SBen Gras.Xr pwd_mkdb 8 , 132*5c007436SBen Gras.Xr vipw 8 133*5c007436SBen Gras.Rs 134*5c007436SBen Gras.%A Robert Morris 135*5c007436SBen Gras.%A Ken Thompson 136*5c007436SBen Gras.%T "UNIX password security" 137*5c007436SBen Gras.Re 138*5c007436SBen Gras.Sh HISTORY 139*5c007436SBen GrasA 140*5c007436SBen Gras.Nm 141*5c007436SBen Grascommand appeared in 142*5c007436SBen Gras.At v6 . 143