NAME

     kpasswd - change a user's Kerberos password

SYNOPSIS

     kpasswd [principal]

DESCRIPTION

     The kpasswd command is used to change a Kerberos principal's
     password.   Kpasswd  prompts  for the current Kerberos pass-
     word, which is used to obtain a changepw ticket from the KDC
     for  the  user's  Kerberos  realm.   If kpasswd successfully
     obtains the changepw ticket, the user is prompted twice  for
     the new password, and the password is changed.

     If the principal is governed by a policy that specifies  the
     length  and/or  number  of character classes required in the
     new password, the new password must conform to  the  policy.
     (The  five  character  classes  are  lower case, upper case,
     numbers, punctuation, and all other characters.)

OPTIONS

     principal
          change the password for the Kerberos principal  princi-
          pal.   Otherwise,  the  principal  is  derived from the
          identity of the user invoking the kpasswd command.

FILES

     /tmp/tkt_kadm_[pid]
                        temporary credentials cache for the life-
                        time  of the password changing operation.
                        ([pid] is the process-ID of  the  kpasswd
                        process.)

SEE ALSO

     kadmin(8), kadmind(8)

BUGS

     If kpasswd is suspended, the changepw  tickets  may  not  be
     destroyed.