Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

makepasswd(1) [debian man page]

makepasswd(1)						       UNIX Reference Manual						     makepasswd(1)

NAME
makepasswd - generate and/or encrypt passwords SYNOPSIS
makepasswd [ --chars N ] [ --clearfrom file ] [ --count N ] [ --crypt | --nocrypt | --crypt-md5 ] [ --cryptsalt N ] [ --help ] [ --maxchars N ] [ --minchars N ] [ --randomseed N ] [ --rerandom N ] [ --repeatpass N ] [ --string string ] [ --verbose | --noverbose ] DESCRIPTION
makepasswd generates true random passwords using /dev/urandom, with the emphasis on security over pronounceability. It can also encrypt plaintext passwords given on the command line. OPTIONS
--chars N Generate passwords with exactly N characters (do not use with options --minchars and --maxchars). --clearfrom FILE Use password from FILE instead of generating passwords. Requires the --crypt or the --crypt-md5 options; may not be used with these options: --chars, --maxchars, --minchars, --count, --string, --nocrypt. Trailing newlines are removed but other white space is not. --count N Produce a total of N passwords (the default is one). --crypt Produce encrypted passwords. --crypt-md5 Produce encrypted passwords using the MD5 digest (hash) algorithm. --cryptsalt N Use crypt() salt N, a positive number <= 4096. If random seeds are desired, specify a zero value (the default). --help Ignore other operands and produce only a help display. --maxchars N Generate passwords with at most N characters (default = 10). --minchars N Generate passwords with at least N characters (default = 8). --nocrypt Do not encrypt the generated password(s) (the default). --noverbose Display no labels on output (the default). --randomseed N Use random number seed N, between 0 and 2^32 inclusive. A zero value results in a real-random seed. This generates much less secure passwords than the default; not only does it generate predictable passwords due to the fixed seed, but the range of available seeds is 32 bits rather than the default of 256 bits, and cannot be changed without breaking expectations of previous users of this option. If possible, do not use this option. --rerandom N Set the random seed value every N values used. Specify zero to use a single seed value (the default). Specify one to get true-ran- dom passwords, though note that doing this too frequently will deplete the supply of entropy available in the kernel's entropy pool. --repeatpass N Use each password N times (4096 maximum, --crypt must be set and --cryptsalt may not be set). --string STRING Use the characters in STRING to generate random passwords. --verbose Display labelling information on output. HISTORY
makepasswd was originally part of the mkircconf program used to centrally administer the Linux Internet Support Cooperative IRC network. It may potentially be of use in any situation where passwords must be secure and need not be memorized by humans. Colin Watson modified it to use OpenSSL's pseudo-random number generator. COPYRIGHT
Copyright (c) 1997-1998 by lilo <lilo@linpeople.org>. All rights are reserved by the author. This program may be used under the terms of version 2 of the GNU Public License. SEE ALSO
passwd(5) Debian Distribution 1998 February 9 makepasswd(1)

Check Out this Related Man Page

SLAPPASSWD(8C)															    SLAPPASSWD(8C)

NAME
slappasswd - OpenLDAP password utility SYNOPSIS
/usr/sbin/slappasswd [-v] [-u] [-s secret|-T file] [-h hash] [-c salt-format] DESCRIPTION
Slappasswd is used to generate an userPassword value suitable for use with ldapmodify(1) or slapd.conf(5) rootpw configuration directive. OPTIONS
-v enable verbose mode. -u Generate RFC 2307 userPassword values (the default). Future versions of this program may generate alternative syntaxes by default. This option is provided for forward compatibility. -s secret The secret to hash. If this and -T are absent, the user will be prompted for the secret to hash. -s and -T and mutually exclusive flags. -T file Hash the contents of the file. If this and -s are absent, the user will be prompted for the secret to hash. -s and -T and mutually exclusive flags. -h scheme If -h is specified, one of the following RFC 2307 schemes may be specified: {CRYPT}, {MD5}, {SMD5}, {SSHA}, and {SHA}. The default is {SSHA}. {SHA} and {SSHA} use the SHA-1 algorithm (FIPS 160-1), the latter with a seed. {MD5} and {SMD5} use the MD5 algorithm (RFC 1321), the latter with a seed. {CRYPT} uses the crypt(3). {CLEARTEXT} indicates that the new password should be added to userPassword as clear text. -c crypt-salt-format Specify the format of the salt passed to crypt(3) when generating {CRYPT} passwords. This string needs to be in sprintf(3) format and may include one (and only one) %s conversion. This conversion will be substituted with a string random characters from [A-Za-z0-9./]. For example, "%.2s" provides a two character salt and "$1$%.8s" tells some versions of crypt(3) to use an MD5 algo- rithm and provides 8 random characters of salt. The default is "%s", which provides 31 characters of salt. LIMITATIONS
The practice storing hashed passwords in userPassword violates Standard Track (RFC 2256) schema specifications and may hinder interoper- ability. A new attribute type, authPassword, to hold hashed passwords has been defined (RFC 3112), but is not yet implemented in slapd(8). SECURITY CONSIDERATIONS
Use of hashed passwords does not protect passwords during protocol transfer. TLS or other eavesdropping protections should be inplace before using LDAP simple bind. The hashed password values should be protected as if they were clear text passwords. SEE ALSO
ldappasswd(1), ldapmodify(1), slapd(8) slapd.conf(5) RFC 2307 RFC 2256 RFC 3112 "OpenLDAP Administrator's Guide" (http://www.OpenLDAP.org/doc/admin/) ACKNOWLEDGEMENTS
OpenLDAP is developed and maintained by The OpenLDAP Project (http://www.openldap.org/). OpenLDAP is derived from University of Michigan LDAP 3.3 Release. OpenLDAP 2.1.X RELEASEDATE SLAPPASSWD(8C)
Man Page