1KPASSWDD(8) BSD System Manager's Manual KPASSWDD(8)
2
4 kpasswdd — Kerberos 5 password changing server
5
7 kpasswdd [--addresses=address] [--check-library=library]
8 [--check-function=function] [-k kspec | --keytab=kspec] [-r
9 realm | --realm=realm] [-p string | --port=string] [--version]
10 [--help]
11
13 kpasswdd serves request for password changes. It listens on UDP port 464
14 (service kpasswd) and processes requests when they arrive. It changes the
15 database directly and should thus only run on the master KDC.
16
17 Supported options:
18
19 --addresses=address
20 For each till the argument is given, add the address to what
21 kpasswdd should listen too.
22
23 --check-library=library
24 If your system has support for dynamic loading of shared
25 libraries, you can use an external function to check password
26 quality. This option specifies which library to load.
27
28 --check-function=function
29 This is the function to call in the loaded library. The function
30 should look like this:
31
32 const char * passwd_check(krb5_context context, krb5_principal
33 principal, krb5_data *password)
34
35 context is an initialized context; principal is the one who tries
36 to change passwords, and password is the new password. Note that
37 the password (in password->data) is not zero terminated.
38
39 -k kspec, --keytab=kspec
40 Keytab to get authentication key from.
41
42 -r realm, --realm=realm
43 Default realm.
44
45 -p string, --port=string
46 Port to listen on (default service kpasswd - 464).
47
49 If an error occurs, the error message is returned to the user and/or
50 logged to syslog.
51
53 The default password quality checks are too basic.
54
56 kpasswd(1), kdc(8)
57
58HEIMDAL April 19, 1999 HEIMDAL