Contained WithinFind More DocumentationFeatured Support Resources |  Download this book in PDF (3611 KB)
passwd(1)NAME | SYNOPSIS | DESCRIPTION | OPTIONS | OPERANDS | ENVIRONMENT VARIABLES | EXIT STATUS | FILES | ATTRIBUTES | SEE ALSO | NOTES NAME
SYNOPSIS
passwd [-rfiles] [-egh] [name] passwd [-rfiles] -s [-a] passwd [-rfiles] -s [name] passwd [-rfiles] [-d| -l] [-f] [-n min] [-w warn] [-x max] name passwd -r nis [-egh] [name] passwd -r nisplus [-egh] [-D domainname] [name] passwd -r nisplus -s [-a] passwd -r nisplus [-D domainname] -s [name] passwd -r nisplus [-l] [-f] [-n min] [-w warn] [-x max] [-D domainname] name DESCRIPTION
The passwd command changes the password or lists password attributes associated with the user's login name. Additionally, privileged users may use passwd to install or change passwords and attributes associated with any login name. When used to change a password, passwd prompts everyone for their old password, if any. It then prompts for the new password twice. When the old password is entered, passwd checks to see if it has "aged" sufficiently. If "aging" is insufficient, passwd terminates; see pwconv(1M), nistbladm(1), and shadow(4) for additional information. When NIS or NIS+ is in effect on a system, passwd changes the NIS or NIS+ database. The NIS or NIS+ password may be different from the password on the local machine. If NIS or NIS+ is running, use passwd -r to change password information on the local machine. The pwconv command creates and updates /etc/shadow with information from /etc/passwd. pwconv relies on a special value of 'x' in the password field of /etc/passwd. This value of 'x' indicates that the password for the user is already in /etc/shadow and should not be modified. If aging is sufficient, a check is made to ensure that the new password meets construction requirements. When the new password is entered a second time, the two copies of the new password are compared. If the two copies are not identical, the cycle of prompting for the new password is repeated for, at most, two more times. Passwords must be constructed to meet the following requirements: If all requirements are met, by default, the passwd command will consult /etc/nsswitch.conf to determine in which repositories to perform password update. It searches the passwd and passwd_compat entries. The sources (repositories) associated with these entries will be updated. However, the password update configurations supported are limited to the following 5 cases. Failure to comply with the configurations will prevent users from logging onto the system. Network administrators, who own the NIS+ password table, may change any password attributes. In the files case, superusers (for instance, real and effective uid equal to 0, see id(1M) and su(1M)) may change any password; hence, passwd does not prompt privileged users for the old password. Privileged users are not forced to comply with password aging and password construction requirements. A privileged user can create a null password by entering a carriage return in response to the prompt for a new password. (This differs from passwd -d because the "password" prompt will still be displayed.) If NIS is in effect, superuser on the root master can change any password without being prompted for the old NIS passwd, and is not forced to comply with password construction requirements. Any user may use the -s option to show password attributes for his or her own login name, provided they are using the -r nisplus argument. Otherwise, the -s argument is restricted to the superuser. The format of the display will be: name status mm/dd/yy min max warn or, if password aging information is not present, name status where Securitypasswd uses pam(3) for password management. The PAM configuration policy, listed through /etc/pam.conf, specifies the password modules to be used for passwd. Here is a partial pam.conf file with entries for the passwd command using the UNIX password module. passwd required password /usr/lib/security/pam_unix.so.1 If there are no entries for the passwd service, then the entries for the "other" service will be used. If multiple password modules are listed, then the user may be prompted for multiple passwords. OPTIONS
Privileged User OptionsOnly a privileged user can use the following options: OPERANDSENVIRONMENT VARIABLES
If any of the LC_* variables ( LC_CTYPE, LC_MESSAGES, LC_TIME, LC_COLLATE, LC_NUMERIC, and LC_MONETARY) (see environ(5)) are not set in the environment, the operational behavior of passwd for each corresponding locale category is determined by the value of the LANG environment variable. If LC_ALL is set, its contents are used to override both the LANG and the other LC_* variables. If none of the above variables is set in the environment, the "C" (U.S. style) locale determines how passwd behaves. EXIT STATUS
The passwd command exits with one of the following values: FILES
ATTRIBUTESSee attributes(5) for descriptions of the following attributes:
SEE ALSOfinger(1), login(1), nispasswd(1), nistbladm(1), yppasswd(1), domainname(1M), eeprom(1M), id(1M), passmgmt(1M), pwconv(1M), su(1M), useradd(1M), userdel(1M), usermod(1M), crypt(3C), getpwnam(3C), getspnam(3C), getusershell(3C), nis_local_directory(3N), pam(3), loginlog(4), nsswitch.conf(4), pam.conf( 4), passwd(4), shadow(4), attributes(5), environ(5), pam_unix(5) NOTESThe passwd command replaces the nispasswd and yppasswd commands and should be used in their place. NAME | SYNOPSIS | DESCRIPTION | OPTIONS | OPERANDS | ENVIRONMENT VARIABLES | EXIT STATUS | FILES | ATTRIBUTES | SEE ALSO | NOTES |
||||||
|