.TH PASSWD 1.SH NAMEpasswd \- change user password.SH SYNOPSIS.B auth/passwd[.BI -u " user"] [.BI -s " signer"] [.I keyfile].SH DESCRIPTION.I Passwdchanges the secret shared between the invokerand the authentication server.I signer(default:.BR $SIGNER ).The.I signermust offer the.IR keysrv (4)service..PPThe secret is associated with a remote user name that need not bethe same as the name of the invoking user on the local system.That remote user name is specified by a certificate signed by.IR signer ,and obtained from.IR keyfile ..I Keyfileidentifies a file containing a certificate (default:.LR default ).If.I keyfileis not an absolute pathname,the file used will be.BI /usr/ user /keyring/ keyfile..I Userby default is the invoking user's name (read from.BR /dev/user ),but the.B -uoption can name another..PP.I Passwdconnects to the.IR signer ,authenticating using the certificate in.IR keyfile ,and checks that the user in the certificateis registered there with an existing secret..I Passwdthen prompts for the (remote) user's old secret, to double-check identity, then prompts for a new one, which must be confirmed..PPSecrets must be at least eight characters long.Try to make them hard to guess..SH FILES.TF /mnt/keysrv.TP.B /dev/usercurrent user name.TP.B /mnt/keysrvlocal mount point for connection toremote.IR keysrv (4).SH SOURCE.B /appl/cmd/auth/passwd.b.SH SEE ALSO.IR keyfs (4),.IR keysrv (4),.IR changelogin (8),.IR logind (8)
.TH PASSWD 1
.SH NAME
passwd \- change user password
.SH SYNOPSIS
.B auth/passwd
[
.BI -u " user"
] [
.BI -s " signer"
] [
.I keyfile
]
.SH DESCRIPTION
.I Passwd
changes the secret shared between the invoker
and the authentication server
.I signer
(default:
.BR $SIGNER ).
The
.I signer
must offer the
.IR keysrv (4)
service.
.PP
The secret is associated with a remote user name that need not be
the same as the name of the invoking user on the local system.
That remote user name is specified by a certificate signed by
.IR signer ,
and obtained from
.IR keyfile .
.I Keyfile
identifies a file containing a certificate (default:
.LR default ).
If
.I keyfile
is not an absolute pathname,
the file used will be
.BI /usr/ user /keyring/ keyfile.
.I User
by default is the invoking user's name (read from
.BR /dev/user ),
but the
.B -u
option can name another.
.PP
.I Passwd
connects to the
.IR signer ,
authenticating using the certificate in
.IR keyfile ,
and checks that the user in the certificate
is registered there with an existing secret.
.I Passwd
then prompts for the (remote) user's old secret, to double-check identity, then prompts for a new one, which must be confirmed.
.PP
Secrets must be at least eight characters long.
Try to make them hard to guess.
.SH FILES
.TF /mnt/keysrv
.TP
.B /dev/user
current user name
.TP
.B /mnt/keysrv
local mount point for connection to
remote
.IR keysrv (4)
.SH SOURCE
.B /appl/cmd/auth/passwd.b
.SH SEE ALSO
.IR keyfs (4),
.IR keysrv (4),
.IR changelogin (8),
.IR logind (8)