summaryrefslogtreecommitdiffstats
path: root/src/man/kpasswd.1
diff options
context:
space:
mode:
Diffstat (limited to 'src/man/kpasswd.1')
-rw-r--r--src/man/kpasswd.179
1 files changed, 79 insertions, 0 deletions
diff --git a/src/man/kpasswd.1 b/src/man/kpasswd.1
new file mode 100644
index 0000000000..ec1c252d5e
--- /dev/null
+++ b/src/man/kpasswd.1
@@ -0,0 +1,79 @@
+.TH "KPASSWD" "1" "January 06, 2012" "0.0.1" "MIT Kerberos"
+.SH NAME
+kpasswd \- change a user's Kerberos password
+.
+.nr rst2man-indent-level 0
+.
+.de1 rstReportMargin
+\\$1 \\n[an-margin]
+level \\n[rst2man-indent-level]
+level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
+-
+\\n[rst2man-indent0]
+\\n[rst2man-indent1]
+\\n[rst2man-indent2]
+..
+.de1 INDENT
+.\" .rstReportMargin pre:
+. RS \\$1
+. nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin]
+. nr rst2man-indent-level +1
+.\" .rstReportMargin post:
+..
+.de UNINDENT
+. RE
+.\" indent \\n[an-margin]
+.\" old: \\n[rst2man-indent\\n[rst2man-indent-level]]
+.nr rst2man-indent-level -1
+.\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
+.in \\n[rst2man-indent\\n[rst2man-indent-level]]u
+..
+.\" Man page generated from reStructeredText.
+.
+.SH SYNOPSIS
+.sp
+\fIkpasswd\fP [ \fIprincipal\fP ]
+.SH DESCRIPTION
+.sp
+The \fIkpasswd\fP command is used to change a Kerberos principal\(aqs password.
+\fIkpasswd\fP prompts for the current Kerberos password, which is used to obtain a
+\fIchangepw\fP ticket from the KDC for the user\(aqs Kerberos realm.
+If \fIkpasswd\fP successfully obtains the \fIchangepw\fP ticket, the user is prompted twice for
+the new password, and the password is changed.
+.sp
+If the principal is governed by a policy that specifies the length and/or number of
+character classes required in the new password, the new password must conform to the policy.
+(The five character classes are lower case, upper case, numbers, punctuation, and all other characters.)
+.SH OPTIONS
+.INDENT 0.0
+.TP
+.B \fIprincipal\fP
+.sp
+Change the password for the Kerberos principal principal.
+Otherwise, \fIkpasswd\fP uses the principal name from an existing ccache if there is one;
+if not, the principal is derived from the identity of the user invoking the \fIkpasswd\fP command.
+.UNINDENT
+.SH PORTS
+.sp
+\fIkpasswd\fP looks first for:
+.sp
+.nf
+.ft C
+kpasswd_server = host:port
+.ft P
+.fi
+.sp
+in the [\fIrealms\fP] section of the \fIkrb5.conf\fP file under the current realm.
+If that is missing, \fIkpasswd\fP looks for the \fIadmin_server\fP entry, but substitutes 464 for the port.
+.SH SEE ALSO
+.sp
+kadmin(8), kadmind(8)
+.SH BUGS
+.sp
+\fIkpasswd\fP may not work with multi\-homed hosts running on the Solaris platform.
+.SH AUTHOR
+MIT
+.SH COPYRIGHT
+2011, MIT
+.\" Generated by docutils manpage writer.
+.