213 lines
6.2 KiB
Plaintext
213 lines
6.2 KiB
Plaintext
'\" t
|
|
.\" Title: chpasswd
|
|
.\" Author: Julianne Frances Haugh
|
|
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
|
|
.\" Date: 23/01/2020
|
|
.\" Manual: Comandi per la gestione del sistema
|
|
.\" Source: shadow-utils 4.8.1
|
|
.\" Language: Italian
|
|
.\"
|
|
.TH "CHPASSWD" "8" "23/01/2020" "shadow\-utils 4\&.8\&.1" "Comandi per la gestione del si"
|
|
.\" -----------------------------------------------------------------
|
|
.\" * Define some portability stuff
|
|
.\" -----------------------------------------------------------------
|
|
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
.\" http://bugs.debian.org/507673
|
|
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
|
|
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
.ie \n(.g .ds Aq \(aq
|
|
.el .ds Aq '
|
|
.\" -----------------------------------------------------------------
|
|
.\" * set default formatting
|
|
.\" -----------------------------------------------------------------
|
|
.\" disable hyphenation
|
|
.nh
|
|
.\" disable justification (adjust text to left margin only)
|
|
.ad l
|
|
.\" -----------------------------------------------------------------
|
|
.\" * MAIN CONTENT STARTS HERE *
|
|
.\" -----------------------------------------------------------------
|
|
.SH "NOME"
|
|
chpasswd \- aggiorna le password in modo non interattivo
|
|
.SH "SINOSSI"
|
|
.HP \w'\fBchpasswd\fR\ 'u
|
|
\fBchpasswd\fR [\fIopzioni\fR]
|
|
.SH "DESCRIZIONE"
|
|
.PP
|
|
The
|
|
\fBchpasswd\fR
|
|
command reads a list of user name and password pairs from standard input and uses this information to update a group of existing users\&. Each line is of the format:
|
|
.PP
|
|
\fIuser_name\fR:\fIpassword\fR
|
|
.PP
|
|
By default the passwords must be supplied in clear\-text, and are encrypted by
|
|
\fBchpasswd\fR\&. Also the password age will be updated, if present\&.
|
|
.PP
|
|
The default encryption algorithm can be defined for the system with the
|
|
\fBENCRYPT_METHOD\fR
|
|
or
|
|
\fBMD5_CRYPT_ENAB\fR
|
|
variables of
|
|
/etc/login\&.defs, and can be overwritten with the
|
|
\fB\-e\fR,
|
|
\fB\-m\fR, or
|
|
\fB\-c\fR
|
|
options\&.
|
|
.PP
|
|
\fBchpasswd\fR
|
|
first updates all the passwords in memory, and then commits all the changes to disk if no errors occurred for any user\&.
|
|
.PP
|
|
Questo comando \(`e appositamente pensato per grossi sistemi in cui si abbia la necessit\(`a di creare molti account nello stesso momento\&.
|
|
.SH "OPZIONI"
|
|
.PP
|
|
The options which apply to the
|
|
\fBchpasswd\fR
|
|
command are:
|
|
.PP
|
|
\fB\-c\fR, \fB\-\-crypt\-method\fR\ \&\fIMETHOD\fR
|
|
.RS 4
|
|
Utilizza il metodo specificato per cifrare le password\&.
|
|
.sp
|
|
I metodi disponibili sono DES, MD5, NONE e SHA256 o SHA512 se la propria libc lo consente\&.
|
|
.sp
|
|
By default (if none of the
|
|
\fB\-c\fR,
|
|
\fB\-m\fR, or
|
|
\fB\-e\fR
|
|
options are specified), the encryption method is defined by the
|
|
\fBENCRYPT_METHOD\fR
|
|
or
|
|
\fBMD5_CRYPT_ENAB\fR
|
|
variables of
|
|
/etc/login\&.defs\&.
|
|
.RE
|
|
.PP
|
|
\fB\-e\fR, \fB\-\-encrypted\fR
|
|
.RS 4
|
|
Le password fornite sono in forma cifrata\&.
|
|
.RE
|
|
.PP
|
|
\fB\-h\fR, \fB\-\-help\fR
|
|
.RS 4
|
|
Mostra un messaggio di aiuto ed esce\&.
|
|
.RE
|
|
.PP
|
|
\fB\-m\fR, \fB\-\-md5\fR
|
|
.RS 4
|
|
Usa la cifratura MD5 anzich\('e DES quando le password fornite non sono cifrate\&.
|
|
.RE
|
|
.PP
|
|
\fB\-R\fR, \fB\-\-root\fR\ \&\fICHROOT_DIR\fR
|
|
.RS 4
|
|
Apply changes in the
|
|
\fICHROOT_DIR\fR
|
|
directory and use the configuration files from the
|
|
\fICHROOT_DIR\fR
|
|
directory\&.
|
|
.RE
|
|
.PP
|
|
\fB\-s\fR, \fB\-\-sha\-rounds\fR\ \&\fIROUNDS\fR
|
|
.RS 4
|
|
Usa il numero specificato di cicli per cifrare la password\&.
|
|
.sp
|
|
Il valore 0 indica che il sistema utilizzer\(`a il numero predefinito di cicli per il metodo crypt (5000)\&.
|
|
.sp
|
|
I valori minimo di 1\&.000 e massimo di 999\&.999\&.999 sono forzati\&.
|
|
.sp
|
|
Si pu\(`o utilizzare questa opzione solo con i metodi di cifratura SHA256 o SHA512\&.
|
|
.sp
|
|
By default, the number of rounds is defined by the
|
|
\fBSHA_CRYPT_MIN_ROUNDS\fR
|
|
and
|
|
\fBSHA_CRYPT_MAX_ROUNDS\fR
|
|
variables in
|
|
/etc/login\&.defs\&.
|
|
.RE
|
|
.SH "AVVISI/CAVEAT"
|
|
.PP
|
|
Ricordarsi di impostare i permessi o umask in modo da prevenire la lettura in chiaro da parte di altri utenti\&.
|
|
.SH "CONFIGURAZIONE"
|
|
.PP
|
|
The following configuration variables in
|
|
/etc/login\&.defs
|
|
change the behavior of this tool:
|
|
.PP
|
|
\fBENCRYPT_METHOD\fR (string)
|
|
.RS 4
|
|
Definisce l\*(Aqalgoritmo di cifratura predefinito per le password (se non ne viene specificato uno a riga di comando)\&.
|
|
.sp
|
|
It can take one of these values:
|
|
\fIDES\fR
|
|
(default),
|
|
\fIMD5\fR, \fISHA256\fR, \fISHA512\fR\&.
|
|
.sp
|
|
Note: this parameter overrides the
|
|
\fBMD5_CRYPT_ENAB\fR
|
|
variable\&.
|
|
.RE
|
|
.PP
|
|
\fBMD5_CRYPT_ENAB\fR (boolean)
|
|
.RS 4
|
|
Indicate if passwords must be encrypted using the MD5\-based algorithm\&. If set to
|
|
\fIyes\fR, new passwords will be encrypted using the MD5\-based algorithm compatible with the one used by recent releases of FreeBSD\&. It supports passwords of unlimited length and longer salt strings\&. Set to
|
|
\fIno\fR
|
|
if you need to copy encrypted passwords to other systems which don\*(Aqt understand the new algorithm\&. Default is
|
|
\fIno\fR\&.
|
|
.sp
|
|
This variable is superseded by the
|
|
\fBENCRYPT_METHOD\fR
|
|
variable or by any command line option used to configure the encryption algorithm\&.
|
|
.sp
|
|
This variable is deprecated\&. You should use
|
|
\fBENCRYPT_METHOD\fR\&.
|
|
.RE
|
|
.PP
|
|
\fBSHA_CRYPT_MIN_ROUNDS\fR (number), \fBSHA_CRYPT_MAX_ROUNDS\fR (number)
|
|
.RS 4
|
|
When
|
|
\fBENCRYPT_METHOD\fR
|
|
is set to
|
|
\fISHA256\fR
|
|
or
|
|
\fISHA512\fR, this defines the number of SHA rounds used by the encryption algorithm by default (when the number of rounds is not specified on the command line)\&.
|
|
.sp
|
|
Con molti cicli \(`e pi\(`u difficile trovare una password usando la forza bruta\&. Ma va notato che \(`e richiesta maggiore potenza di calcolo per autenticare gli utenti\&.
|
|
.sp
|
|
Se non specificato sar\(`a la libc a scegliere il numero di cicli (5000)\&.
|
|
.sp
|
|
Il valore deve essere compreso tra 1\&.000 e 999\&.999\&.999\&.
|
|
.sp
|
|
If only one of the
|
|
\fBSHA_CRYPT_MIN_ROUNDS\fR
|
|
or
|
|
\fBSHA_CRYPT_MAX_ROUNDS\fR
|
|
values is set, then this value will be used\&.
|
|
.sp
|
|
If
|
|
\fBSHA_CRYPT_MIN_ROUNDS\fR
|
|
>
|
|
\fBSHA_CRYPT_MAX_ROUNDS\fR, the highest value will be used\&.
|
|
.RE
|
|
.SH "FILE"
|
|
.PP
|
|
/etc/passwd
|
|
.RS 4
|
|
Informazioni sugli account utente\&.
|
|
.RE
|
|
.PP
|
|
/etc/shadow
|
|
.RS 4
|
|
Informazioni sicure sugli account utente\&.
|
|
.RE
|
|
.PP
|
|
/etc/login\&.defs
|
|
.RS 4
|
|
Configurazione del pacchetto password shadow
|
|
.RE
|
|
.SH "VEDERE ANCHE"
|
|
.PP
|
|
\fBpasswd\fR(1),
|
|
\fBnewusers\fR(8),
|
|
\fBlogin.defs\fR(5),
|
|
\fBuseradd\fR(8)\&.
|