Endpoint Administration Guide for UNIX › Managing User Passwords › Defining Password Policies › Changing Passwords

Changing Passwords

CA ControlMinder includes the executable ACInstallDir/bin/sepass (where ACInstallDir is the installation directory for CA ControlMinder, by default /opt/CA/AccessControl), with which most users should change their passwords (instead of with /bin/passwd).

• Only sepass ensures that the new password matches CA ControlMinder password policies. And only sepass updates the database with the new password and the date on which the password was changed. In addition, sepass performs the same functions as /bin/passwd.
• The original /bin/passwd executable should not be used unless you choose to discard the password quality checks performed by CA ControlMinder. In this case, you can continue to use the original /bin/passwd, and CA ControlMinder accepts the system's password without performing any quality checks on passwords.

You can also change passwords using selang. Enter the following command to assign a password to a user:

chusr userName password(string)

Note: If you change another user's password (as an administrator) and password checking is enabled, the user must change the password at the next login.