xref: /freebsd/crypto/heimdal/kpasswd/kpasswdd.8 (revision 5e9cd1ae3e10592ed70e7575551cba1bbab04d84)
1.\" $Id: kpasswdd.8,v 1.3 2001/01/11 21:36:43 assar Exp $
2.\"
3.Dd April 19, 1999
4.Dt KPASSWDD 8
5.Os HEIMDAL
6.Sh NAME
7.Nm kpasswdd
8.Nd
9Kerberos 5 password changing server
10.Sh SYNOPSIS
11.Nm
12.Op Fl -check-library= Ns Ar library
13.Op Fl -check-function= Ns Ar function
14.Oo Fl k Ar kspec \*(Ba Xo
15.Fl -keytab= Ns Ar kspec Oc
16.Xc
17.Oo Fl r Ar realm \*(Ba Xo
18.Fl -realm= Ns Ar realm Oc
19.Xc
20.Oo Fl p Ar string \*(Ba Xo
21.Fl -port= Ns Ar string Oc
22.Xc
23.Op Fl -version
24.Op Fl -help
25.Sh DESCRIPTION
26.Nm
27serves request for password changes. It listens on UDP port 464
28(service kpasswd) and processes requests when they arrive. It changes
29the database directly and should thus only run on the master KDC.
30.Pp
31Supported options:
32.Bl -tag -width Ds
33.It Xo
34.Fl -check-library= Ns Ar library
35.Xc
36If your system has support for dynamic loading of shared libraries,
37you can use an external function to check password quality. This
38option specifies which library to load.
39.It Xo
40.Fl -check-function= Ns Ar function
41.Xc
42This is the function to call in the loaded library. The function
43should look like this:
44.Pp
45.Ft const char *
46.Fn passwd_check "krb5_context context" "krb5_principal principal" "krb5_data *password"
47.Pp
48.Fa context
49is an initialized context;
50.Fa principal
51is the one who tries to change passwords, and
52.Fa password
53is the new password. Note that the password (in
54.Fa password->data )
55is not zero terminated.
56.It Xo
57.Fl k Ar kspec Ns ,
58.Fl -keytab= Ns Ar kspec
59.Xc
60keytab to get authentication key from
61.It Xo
62.Fl r Ar realm Ns ,
63.Fl -realm= Ns Ar realm
64.Xc
65default realm
66.It Xo
67.Fl p Ar string Ns ,
68.Fl -port= Ns Ar string
69.Xc
70port to listen on (default service kpasswd - 464).
71.El
72.Sh DIAGNOSTICS
73If an error occurs, the error message is returned to the user and/or
74logged to syslog.
75.Sh BUGS
76The default password quality checks are too basic.
77.Sh SEE ALSO
78.Xr kdc 8 ,
79.Xr kpasswd 1
80.\".Sh ENVIRONMENT
81.\".Sh FILES
82.\".Sh EXAMPLES
83.\".Sh SEE ALSO
84.\".Sh STANDARDS
85.\".Sh HISTORY
86.\".Sh AUTHORS
87