diff --git a/man/passwd.5.xml b/man/passwd.5.xml index 8625dfbd..7738d09a 100644 --- a/man/passwd.5.xml +++ b/man/passwd.5.xml @@ -98,24 +98,43 @@ - The encrypted password field may be blank, in which case no password - is required to authenticate as the specified login name. However, - some applications which read the /etc/passwd file - may decide not to permit any access at all if the - password field is blank. If the - password field is a lower-case x, - then the encrypted password is actually stored in the + If the password field is a lower-case + x, then the encrypted password is actually stored in the shadow 5 file instead; there must be a corresponding line in the /etc/shadow file, or else the user account is invalid. - If the password field is any other string, then - it will be treated as an encrypted password, as specified by - crypt - 3. - + + The encrypted password field may be empty, + in which case no password is required to authenticate as the + specified login name. However, some applications which read the + /etc/passwd file may decide not to permit + any access at all if the + password field is blank. + + + + A password field which starts with an + exclamation mark means that the password is locked. The + remaining characters on the line represent the + password field before the password was + locked. + + + + Refer to crypt + 3 for details on how + this string is interpreted. + + + If the password field contains some string that is not a valid + result of crypt + 3, for instance ! or *, + the user will not be able to use a unix password to log in + (but the user may log in the system by other means). + The comment field is used by various system utilities, such as finger diff --git a/man/shadow.5.xml b/man/shadow.5.xml index 5d20511a..79ae27a3 100644 --- a/man/shadow.5.xml +++ b/man/shadow.5.xml @@ -95,18 +95,6 @@ encrypted password - - Refer to crypt - 3 for details on how - this string is interpreted. - - - If the password field contains some string that is not a valid - result of crypt - 3, for instance ! or *, - the user will not be able to use a unix password to log in - (but the user may log in the system by other means). - This field may be empty, in which case no passwords are required to authenticate as the specified login name. @@ -120,6 +108,18 @@ line represent the password field before the password was locked. + + Refer to crypt + 3 for details on how + this string is interpreted. + + + If the password field contains some string that is not a valid + result of crypt + 3, for instance ! or *, + the user will not be able to use a unix password to log in + (but the user may log in the system by other means). +