CHGPASSWD(8)

名称
chgpasswd - 批量更新组密码

大纲

chgpasswd [options]

描述

The chgpasswd command reads a list of group name and password pairs from standard input and uses this information to update a set of existing groups. Each line is of the format:

group_name:password

By default the supplied password must be in clear-text, and is encrypted by chgpasswd.

The default encryption algorithm can be defined for the system with the ENCRYPT_METHOD variable of /etc/login.defs, and can be overwritten with the -e, -m, or -c options.

此命令一般用于需要一次创建很多用户的大型系统。

选项

The options which apply to the chgpasswd command are:

-c, --crypt-method
    使用指定的方法加密密码。

    The available methods are DES, MD5, SHA256, SHA512 and NONE if your libc supports these methods.

-e, --encrypted
    提供的密码是已经加密了的

-h, --help
    显示帮助信息并退出。

-m, --md5
    如果提供的密码没有加密，则使用 MD5 加密而不是 DES。

-R, --root CHROOT_DIR
    Apply changes in the CHROOT_DIR directory and use the configuration files from the CHROOT_DIR directory. Only absolute paths are supported.

-s, --sha-rounds
    使用指定次数的轮转来加密密码。

    You can only use this option with crypt method: SHA256 SHA512

    By default, the number of rounds for SHA256 or SHA512 is defined by the SHA_CRYPT_MIN_ROUNDS and SHA_CRYPT_MAX_ROUNDS variables in /etc/login.defs.

    A minimal value of 1000 and a maximal value of 999,999,999 will be enforced for SHA256 and SHA512. The default number of rounds is 5000.

CAVEATS

记住要设置权限或者掩码来阻止其它用户对未加密文件的读取。

您需要确保你吗和加密方法符合系统的密码策略。

配置文件

The following configuration variables in /etc/login.defs change the behavior of this tool:

文件

/etc/group
    组账户信息。

/etc/gshadow
    安全组账户信息。

/etc/login.defs
    Shadow 密码套件配置。

参见

gpasswd(1), groupadd(8), login.defs(5).