pwconv(1M)                                                       pwconv(1M)




 NAME    [Toc]    [Back]
      pwconv - install, update or check the /etc/shadow file

 SYNOPSIS    [Toc]    [Back]
      /usr/sbin/pwconv [-t] [-v]

 DESCRIPTION    [Toc]    [Back]
      The pwconv command installs or appends /etc/shadow with information
      from /etc/passwd, or checks for any discrepancies between the contents
      of the two files.

      The pwconv command without options does the following:

           1.  Creates the file /etc/shadow if it does not exist; otherwise,
               it removes all entries for usernames that are not present in
               /etc/passwd.
           2.  For each entry in /etc/passwd, move the encrypted password
               and aging information to /etc/shadow.  Entries in /etc/passwd
               that have no encrypted password or aging information will not
               overwrite information in /etc/shadow.
           3.  Writes an "x" in each password field of the /etc/passwd file
               to indicate that the password and aging information reside in
               the /etc/shadow file.

      The pwconv command relies on a special value of "x" in the password
      field of /etc/passwd.  A value different from "x" will prompt pwconv
      to move the password and aging information into the corresponding
      fields of /etc/shadow, and then replace the password field in
      /etc/passwd with an "x".

      If no aging information exists in /etc/passwd for a user, none will be
      added to /etc/shadow.  However, the last change field, that indicates
      when the password was last modified, will always be updated (default
      is current date).  See shadow(4).

    Options    [Toc]    [Back]
      The following options are recognized:

      -v   Verbose.  Performs as pwconv but also prints error information to
           stdout.

      -t   Test.  Performs as pwconv -v but makes no changes to /etc/passwd
           and /etc/shadow.

    Notes    [Toc]    [Back]
      The pwconv command can only be used by the superuser.

      HP recommends running pwck before pwconv.  See pwck(1M).

      A system that has been converted to a trusted system has no
      /etc/shadow file.  In this case, pwconv can be used with no options to



 Hewlett-Packard Company            - 1 -   HP-UX 11i Version 2: August 2003






 pwconv(1M)                                                       pwconv(1M)




      update the secure password facility to reflect any changes made in the
      /etc/passwd file.

 RETURN VALUE    [Toc]    [Back]
      pwconv exits with one of the following values:

           0    Successful completion.
           1    Conversion error occurred.

 FILES    [Toc]    [Back]
      /etc/passwd                   system password file.
      /etc/shadow                   shadow password file.
      /tcb/files/auth/*/*           secure password facility.

 SEE ALSO    [Toc]    [Back]
      pwck(1M), pwunconv(1M), passwd(4), shadow(4).


 Hewlett-Packard Company            - 2 -   HP-UX 11i Version 2: August 2003