User Commands                                          kpasswd(1)

NAME
     kpasswd - change a user's Kerberos password

SYNOPSIS
     /usr/bin/kpasswd [ principal ]

DESCRIPTION
     The kpasswd command is used to change a Kerberos principal's
     password. kpasswd prompts for the current Kerberos password,
     which is used to obtain a changepw ticket from the  KDC  for
     the  user's Kerberos realm.  If kpasswd successfully obtains
     the changepw ticket, the user is prompted twice for the  new
     password, and the password is changed.

     If the principal is governed by a policy that specifies  the
     length  and/or  number  of character classes required in the
     new password, the new password must conform to  the  policy.
     (The  five  character  classes  are  lower case, upper case,
     numbers, punctuation, and all other characters.)

OPERANDS
     The following operand is supported:

     principal
           change the password for the Kerberos principal princi-
           pal.  Otherwise,  the  principal  is  derived from the
           identity of the user invoking the kpasswd command.

FILES
     /tmp/ovsec_adm.xxxxxx
           temporary credentials cache for the  lifetime  of  the
           password  changing  operation.  (xxxxxx  is  a  random
           string.)

ATTRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:

     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | Availability                | SUNWcsu                     |
    |_____________________________|_____________________________|
    | CSI                         | Enabled                     |
    |_____________________________|_____________________________|

SEE ALSO
     SEAM(5)

NOTES

SunOS 5.8           Last change: 17 Nov 1999                    1

User Commands                                          kpasswd(1)

     Kerberos privacy support must  be  installed  on  the  local
     machine  for kpasswd to work. kpasswd requires that the Ker-
     beros GSS plug-in module with privacy support  be  installed
     on  the  local  machine. Currently this is only available on
     the Solaris encryption kit CD (due to import/export restric-
     tions  on  DES  for encryption purposes). This support is in
     SUNWk5pk and SUNWk5pu packages.

BUGS
     If kpasswd is suspended, the  changepw tickets  may  not  be
     destroyed.

SunOS 5.8           Last change: 17 Nov 1999                    2