Using The Ch_Passwd Utility - Bay Networks 6300 Supplement Manual

Book A

Using the ch_passwd Utility

Remote Annex 6300 Supplement to the Remote Annex Administrator's Guide for UNIX
The ch_passwd utility enables users to change their passwords when
accessing an RA 6300 through the Access Control Protocol (ACP)
security system. This utility affects only passwords in the acp_passwd
or acp_shadow file. Table A-42
ch_passwd.
To change an RA 6300 user password, the username in the
acp_passwd file must match the username in the /etc/passwd (or /
etc/shadow) file on the ACP host.
If ACP is configured to record password histories, it saves the
passwords set via the ch_passwd command. ACP keeps these
passwords in the acp_dbm database on the security host, keyed by
user name. The value of the STORED_PASS variable in
acp_policy.h determines the number of passwords saved. This
variable is initialized to 6 for passwd/shadow files and 0 for passwd
files alone. A value of 0 disables password history. For more
information, see
page 15-281.
The ch_passwd utility first prompts for the old password, and then for
the new one. The syntax is:
ch_passwd
A superuser can change the password for any user. The superuser syntax
is:
ch_passwd [username] [–s directory]
Chapter 15
describes the supported argument for
Enabling and Configuring Password Histories
Using RA 6300 Security
on
A-337