HP-UX Reference (11i v2 03/08) - 1 User Commands A-M (vol 1)

kpasswd(1) kpasswd(1)

NAME

kpasswd - change a user’s Kerberos password

SYNOPSIS

kpasswd [principal ]

DESCRIPTION

The

kpasswd command is used to change a Kerberos principal’s password.

kpasswd prompts for the

current Kerberos password, which is used to obtain a

changepw ticket from the KDC (Key Distribution

Center) for the user’s Kerberos realm. If

kpasswd successfully obtains the changepw ticket, the user is

prompted twice for the new password, and the password is changed.

If the principal is governed by a policy that speciﬁes the length and/or number of character classes

required in the new password, the new password must conform to the policy. The ﬁve character classes

are lower case, upper case, numbers, punctuation, and all other characters.

Options

principal Changes the password for the Kerberos principal, principal .

kpasswd uses the princi-

pal name from an existing cache if there is one. If not, the principal is derived from the

identity of the user invoking the

kpasswd command.

Note

kpasswd looks ﬁrst for kpasswd_server = host:port

in the [realms] section of the krb5.conf

ﬁle under the current realm. If that is missing, kpasswd looks for the admin_server entry, and substi-

tutes 464 for the port.

FILES

/etc/krb5.conf Kerberos conﬁguration ﬁle.

AUTHOR

kpasswd was developed by the Massachusetts Institute of Technology.