NAME
pwconv — install, update or check the /etc/shadow file
SYNOPSIS
/usr/sbin/pwconv
[-t]
[-v]
DESCRIPTION
The
pwconv
command installs or appends
/etc/shadow
with information from
/etc/passwd,
or checks for any discrepancies between the contents
of the two files.
The
pwconv
command without options does the following:
- 1.
Creates the file
/etc/shadow
if it does not exist;
otherwise, it removes all entries for usernames
that are not present in
/etc/passwd.
- 2.
For each entry in
/etc/passwd,
move the encrypted password and aging information to
/etc/shadow.
Entries in
/etc/passwd
that have no encrypted password or aging information will
not overwrite information in
/etc/shadow.
- 3.
Writes an "x" in each password field of the
/etc/passwd
file to indicate that the password and aging information reside in the
/etc/shadow
file.
The
pwconv
command relies on a special value of "x" in the password
field of
/etc/passwd.
A value different from "x" will prompt
pwconv
to move the password and aging information into
the corresponding fields of
/etc/shadow,
and then replace the password field in
/etc/passwd
with an "x".
If no aging information exists in
/etc/passwd
for a user, none will be added to
/etc/shadow.
However, the
last change
field, that indicates when the password was last modified,
will always be updated (default is current date).
See
shadow(4).
Options
The following options are recognized:
- -v
Verbose. Performs as
pwconv
but also prints error
information to stdout.
- -t
Test. Performs as
pwconv -v
but makes no changes to
/etc/passwd
and
/etc/shadow.
Notes
The
pwconv
command can only be used by the superuser.
HP recommends running
pwck
before
pwconv.
See
pwck(1M).
A system that has been converted to a trusted system has no
/etc/shadow
file.
In this case,
pwconv
can be used with no options to update the secure password
facility to reflect any changes made in the
/etc/passwd
file.
RETURN VALUE
pwconv
exits with one of the following values:
- 0
Successful completion.
- 1
Conversion error occurred.
FILES
- /etc/passwd
system password file.
- /etc/shadow
shadow password file.
- /tcb/files/auth/*/*
secure password facility.
