KPASSWD(1)                                             KPASSWD(1)

NAME

       kpasswd - change a user's Kerberos password

SYNOPSIS

       kpasswd  [ -h ] [ -n name ] [ -i instance ] [ -r realm ] [
       -u username[.instance][@realm]]

DESCRIPTION

       The kpasswd command is used to change a  Kerberos  princi-
       pal's password.

       If  the  -h  option  is  specified, a brief summary of the
       options is printed, and kpasswd then exits.

       If the -n option is specified, name is used as the princi-
       pal  name  rather  than  the  username of the user running
       kpasswd.  (This is determined from the ticket file  if  it
       exists;  otherwise,  it  is  determined from the unix user
       id.)

       If the -i option is specified, instance  is  used  as  the
       instance rather than a null instance.

       If  the -r option is specified, realm is used as the realm
       rather than the local realm.

       If the -u option is specified, a fully qualified  kerberos
       principal can be given.

       The  utility  prompts  for  the  current Kerberos password
       (printing the name of the principal for which  it  intends
       to change the password), which is verified by the Kerberos
       server.  If the old  password  is  correct,  the  user  is
       prompted twice for the new password.  A message is printed
       indicating the success or failure of the password changing
       operation.

BUGS

       kpasswd  does  not handle names, instances, or realms with
       special characters in them when the -n, -i, or -r  options
       are used.  Any valid fullname is accepted, however, if the
       -u option is used.

       If the principal whose password you are trying  to  change
       does  not exist, you will not be told until after you have
       entered the old password.

SEE ALSO

       kerberos(1), kinit(1), passwd(1), kadmin(8)