    [1mSYNOPSIS[0m
           [1mkpasswd [22m[[4mprincipal[24m]

    [1mDESCRIPTION[0m
           The  [4mkpasswd[24m command is used to change a Kerberos principal's password.
           [4mKpasswd[24m prompts for the current Kerberos password,  which  is  used  to
           obtain  a  [1mchangepw  [22mticket from the KDC for the user's Kerberos realm.
           If [1mkpasswd [22msuccessfully  obtains  the  [1mchangepw  [22mticket,  the  user  is
           prompted twice for the new password, and the password is changed.

           If  the  principal  is  governed  by a policy that specifies the length
           and/or number of character classes required in the  new  password,  the
           new  password  must conform to the policy.  (The five character classes
           are lower case, upper case, numbers, punctuation, and all other charac-
           ters.)

    [1mOPTIONS[0m
           [4mprincipal[0m
                  change  the password for the Kerberos principal [4mprincipal[24m.  Oth-
                  erwise, [4mkpasswd[24m uses the principal name from an existing  ccache
                  if there is one; if not, the principal is derived from the iden-
                  tity of the user invoking the [4mkpasswd[24m command.

    [1mPORTS[0m
           [1mkpasswd [22mlooks first for kpasswd_server = host:port in the [realms] sec-
           tion  of  the krb5.conf file under the current realm.  If that is miss-
           ing, [1mkpasswd [22mlooks for the admin_server entry, but substitutes 464  for
           the port.

    [1mSEE ALSO[0m
           kadmin(8), kadmind(8)

    [1mBUGS[0m
           [1mkpasswd  [22mmay  not  work  with  multi-homed hosts running on the Solaris
           platform.

                                                                        KPASSWD(1)