passwd(1)                  C2 Trusted DG/UX 5.4.2T                 passwd(1)


NAME
       passwd - change user password

SYNOPSIS
       passwd [ -f filename ] [ -q | -s setname ] [ username ]

DESCRIPTION
       This command changes (or installs) a password associated with a
       username (your own by default).

       Passwd prompts for the old password and then for the new one.  You
       must supply both, and the new password must be typed twice to
       forestall mistakes.

       On the Trusted DG/UX system passwd always assumes that users want to
       change the password with which they entered the system.  For example,
       if user fred uses the login service to create a session, uses su to
       become wilma, and enters passwd fred or simply passwd, passwd expects
       to change fred's password associated with login.  If fred logs in,
       uses su to become wilma, and enters passwd wilma, passwd returns an
       error.

       Because Trusted DG/UX users can only become root by using su, you can
       change the root password by becoming root and typing passwd root.  If
       you do become root, you can also use passwd with the name of any
       other user (including yourself).  If you become root, and you enter
       passwd without a username, passwd treats the su to root like any
       other su, that is, it changes the password with which you entered the
       system.

       On Trusted DG/UX, you can use the -s option to specify a password set
       (setname) you want to change.  If you enter passwd -ssetname, or
       passwd -ssetname username, you will only be prompted to change the
       particular password set you specified with setname.  The password
       sets typically available are public, local, su, and remote, although
       not every user will have these password sets and there may be other
       password sets present.

       On Trusted DG/UX, you can also use the -q option to have passwd
       prompt you with a list of possible password sets to change. The -q
       option also displays if any of the password sets are expired.  The -q
       and -s options are mutually exclusive.

       The new password is checked to ensure that it meets construction
       requirements.  When the new password is entered a second time, the
       two copies of the new password are compared.  If the two copies do
       not match, then the cycle of prompting for the new password is
       repeated (at most) two more times.

       Passwords must meet the following requirements:

       1)     Each password must have at least six characters. Only the
              first eight characters are significant.




Licensed material--property of copyright holder(s)                         1

passwd(1)                  C2 Trusted DG/UX 5.4.2T                 passwd(1)


       2)     Each password must contain at least two alphabetic characters
              and at least one numeric or special character.  In this case,
              alphabetic means upper and lowercase letters.

       3)     Each password must differ from the user name and from any
              reverse or circular shift of that name.  For comparison
              purposes, an uppercase letter and its corresponding lowercase
              letter are equivalent.

       4)     New passwords must differ from the old by at least three
              characters.  For comparison purposes, an uppercase letter and
              its corresponding lowercase letter are equivalent.

       Anyone whose effective uid is zero is called a superuser; see id(1)
       and su(1).  Superusers may change any password, so passwd does not
       prompt superusers for the old password.  Superusers do not have to
       comply with password construction requirements.

   Options
       The following option is used only on standard DG/UX systems and is
       not available on Trusted DG/UX systems.

       -f     Treat file as the password file. By default, /etc/passwd is
              used.

       The following options are available on Trusted DG/UX systems only.

       -s     Change the password in the specified password attribute set.

       -q     Displays a list of all password sets for the user, including
              an indication of any password set that is expired.  It then
              prompts for the password attribute set to change.

FILES
       /etc/passwd

NOTES
       passwd will not change your password if it is stored by the Network
       Information Service (NIS).  Refer to yppasswd(1) for more
       information.

SEE ALSO
       login(1), yppasswd(1) crypt(3C), passwd(4),
       Robert Morris and Ken Thompson, UNIX Password Security

       Security Features User's Guide for the Trusted DG/UX System
       Trusted Facility Manual for the C2 Trusted DG/UX System










Licensed material--property of copyright holder(s)                         2