blob: b7d2e8dc91f8a7cee2bf152c6a2620e335936126 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
KPASSWDD(8) UNIX System Manager's Manual KPASSWDD(8)
NNAAMMEE
kkppaasssswwdddd - Kerberos 5 password changing server
SSYYNNOOPPSSIISS
kkppaasssswwdddd [----cchheecckk--lliibbrraarryy==_l_i_b_r_a_r_y] [----cchheecckk--ffuunnccttiioonn==_f_u_n_c_t_i_o_n] [--kk _k_s_p_e_c
| ----kkeeyyttaabb==_k_s_p_e_c] [--rr _r_e_a_l_m | ----rreeaallmm==_r_e_a_l_m] [--pp _s_t_r_i_n_g | ----ppoorrtt==_s_t_r_i_n_g]
[----vveerrssiioonn] [----hheellpp]
DDEESSCCRRIIPPTTIIOONN
kkppaasssswwdddd serves request for password changes. It listens on UDP port 464
(service kpasswd) and processes requests when they arrive. It changes the
database directly and should thus only run on the master KDC.
Supported options:
----cchheecckk--lliibbrraarryy==_l_i_b_r_a_r_y
If your system has support for dynamic loading of shared li-
braries, you can use an external function to check password qual-
ity. This option specifies which library to load.
----cchheecckk--ffuunnccttiioonn==_f_u_n_c_t_i_o_n
This is the function to call in the loaded library. The function
should look like this:
_c_o_n_s_t _c_h_a_r _* ppaasssswwdd__cchheecckk(_k_r_b_5___c_o_n_t_e_x_t _c_o_n_t_e_x_t, _k_r_b_5___p_r_i_n_c_i_p_a_l
_p_r_i_n_c_i_p_a_l, _k_r_b_5___d_a_t_a _*_p_a_s_s_w_o_r_d)
_c_o_n_t_e_x_t is an initialized context; _p_r_i_n_c_i_p_a_l is the one who tries
to change passwords, and _p_a_s_s_w_o_r_d is the new password. Note that
the password (in _p_a_s_s_w_o_r_d_-_>_d_a_t_a) is not zero terminated.
--kk _k_s_p_e_c, ----kkeeyyttaabb==_k_s_p_e_c
keytab to get authentication key from
--rr _r_e_a_l_m, ----rreeaallmm==_r_e_a_l_m
default realm
--pp _s_t_r_i_n_g, ----ppoorrtt==_s_t_r_i_n_g
port to listen on (default service kpasswd - 464).
DDIIAAGGNNOOSSTTIICCSS
If an error occurs, the error message is returned to the user and/or
logged to syslog.
BBUUGGSS
The default password quality checks are too basic.
SSEEEE AALLSSOO
kdc(8), kpasswd(1)
HEIMDAL April 19, 1999 1
|
