xref: /freebsd/crypto/heimdal/kpasswd/kpasswdd.8 (revision daf1cffce2e07931f27c6c6998652e90df6ba87e)
1.\" $Id: kpasswdd.8,v 1.2 1999/04/19 16:32:01 joda Exp $
2.\"
3.Dd April 19, 1999
4.Dt KPASSWDD 8
5.Os HEIMDAL
6.Sh NAME
7.Nm kpasswdd
8.Nd
9Kerberos 5 password changing server
10.Sh SYNOPSIS
11.Nm
12.Op Fl -check-library= Ns Ar library
13.Op Fl -check-function= Ns Ar function
14.Sh DESCRIPTION
15.Nm
16serves request for password changes. It listens on UDP port 464
17(service kpasswd) and processes requests when they arrive. It changes
18the database directly and should thus only run on the master KDC.
19.Pp
20Supported options:
21.Bl -tag -width Ds
22.It Xo
23.Fl -check-library= Ns Ar library
24.Xc
25If your system has support for dynamic loading of shared libraries,
26you can use an external function to check password quality. This
27option specifies which library to load.
28.It Xo
29.Fl -check-function= Ns Ar function
30.Xc
31This is the function to call in the loaded library. The function
32should look like this:
33.Pp
34.Ft const char *
35.Fn passwd_check "krb5_context context" "krb5_principal principal" "krb5_data *password"
36.Pp
37.Fa context
38is an initialized context;
39.Fa principal
40is the one who tries to change passwords, and
41.Fa password
42is the new password. Note that the password (in
43.Fa password->data )
44is not zero terminated.
45.El
46.Sh DIAGNOSTICS
47If an error occurs, the error message is returned to the user and/or
48logged to syslog.
49.Sh BUGS
50The default password quality checks are too basic.
51.Sh SEE ALSO
52.Xr kdc 8 ,
53.Xr kpasswd 1
54.\".Sh ENVIRONMENT
55.\".Sh FILES
56.\".Sh EXAMPLES
57.\".Sh SEE ALSO
58.\".Sh STANDARDS
59.\".Sh HISTORY
60.\".Sh AUTHORS
61