KPASSWDD(8) NetBSD System Manager's Manual KPASSWDD(8) NNAAMMEE kkppaasssswwdddd - Kerberos 5 password changing server SSYYNNOOPPSSIISS kkppaasssswwdddd [----cchheecckk--lliibbrraarryy==_l_i_b_r_a_r_y] [----cchheecckk--ffuunnccttiioonn==_f_u_n_c_t_i_o_n] [--kk _k_s_p_e_c | ----kkeeyyttaabb==_k_s_p_e_c] [--rr _r_e_a_l_m | ----rreeaallmm==_r_e_a_l_m] [--pp _s_t_r_i_n_g | ----ppoorrtt==_s_t_r_i_n_g] [----vveerrssiioonn] [----hheellpp] DDEESSCCRRIIPPTTIIOONN kkppaasssswwdddd serves request for password changes. It listens on UDP port 464 (service kpasswd) and processes requests when they arrive. It changes the database directly and should thus only run on the master KDC. Supported options: ----cchheecckk--lliibbrraarryy==_l_i_b_r_a_r_y If your system has support for dynamic loading of shared li- braries, you can use an external function to check password qual- ity. This option specifies which library to load. ----cchheecckk--ffuunnccttiioonn==_f_u_n_c_t_i_o_n This is the function to call in the loaded library. The function should look like this: _c_o_n_s_t _c_h_a_r _* ppaasssswwdd__cchheecckk(_k_r_b_5___c_o_n_t_e_x_t _c_o_n_t_e_x_t, _k_r_b_5___p_r_i_n_c_i_p_a_l _p_r_i_n_c_i_p_a_l, _k_r_b_5___d_a_t_a _*_p_a_s_s_w_o_r_d) _c_o_n_t_e_x_t is an initialized context; _p_r_i_n_c_i_p_a_l is the one who tries to change passwords, and _p_a_s_s_w_o_r_d is the new password. Note that the password (in _p_a_s_s_w_o_r_d_-_>_d_a_t_a) is not zero terminated. --kk _k_s_p_e_c, ----kkeeyyttaabb==_k_s_p_e_c keytab to get authentication key from --rr _r_e_a_l_m, ----rreeaallmm==_r_e_a_l_m default realm --pp _s_t_r_i_n_g, ----ppoorrtt==_s_t_r_i_n_g port to listen on (default service kpasswd - 464). DDIIAAGGNNOOSSTTIICCSS If an error occurs, the error message is returned to the user and/or logged to syslog. BBUUGGSS The default password quality checks are too basic. SSEEEE AALLSSOO kpasswd(1), kdc(8) HEIMDAL April 19, 1999 1