diff --git a/man/passwd.5.xml b/man/passwd.5.xml
index 8625dfbd..7738d09a 100644
--- a/man/passwd.5.xml
+++ b/man/passwd.5.xml
@@ -98,24 +98,43 @@
- The encrypted password field may be blank, in which case no password
- is required to authenticate as the specified login name. However,
- some applications which read the /etc/passwd file
- may decide not to permit any access at all if the
- password field is blank. If the
- password field is a lower-case x
,
- then the encrypted password is actually stored in the
+ If the password field is a lower-case
+ x
, then the encrypted password is actually stored in the
shadow
5 file instead; there
must be a corresponding line in the
/etc/shadow file, or else the user account is invalid.
- If the password field is any other string, then
- it will be treated as an encrypted password, as specified by
- crypt
- 3.
-
+
+ The encrypted password field may be empty,
+ in which case no password is required to authenticate as the
+ specified login name. However, some applications which read the
+ /etc/passwd file may decide not to permit
+ any access at all if the
+ password field is blank.
+
+
+
+ A password field which starts with an
+ exclamation mark means that the password is locked. The
+ remaining characters on the line represent the
+ password field before the password was
+ locked.
+
+
+
+ Refer to crypt
+ 3 for details on how
+ this string is interpreted.
+
+
+ If the password field contains some string that is not a valid
+ result of crypt
+ 3, for instance ! or *,
+ the user will not be able to use a unix password to log in
+ (but the user may log in the system by other means).
+
The comment field is used by various system utilities, such as
finger
diff --git a/man/shadow.5.xml b/man/shadow.5.xml
index 5d20511a..79ae27a3 100644
--- a/man/shadow.5.xml
+++ b/man/shadow.5.xml
@@ -95,18 +95,6 @@
encrypted password
-
- Refer to crypt
- 3 for details on how
- this string is interpreted.
-
-
- If the password field contains some string that is not a valid
- result of crypt
- 3, for instance ! or *,
- the user will not be able to use a unix password to log in
- (but the user may log in the system by other means).
-
This field may be empty, in which case no passwords are
required to authenticate as the specified login name.
@@ -120,6 +108,18 @@
line represent the password field before the password was
locked.
+
+ Refer to crypt
+ 3 for details on how
+ this string is interpreted.
+
+
+ If the password field contains some string that is not a valid
+ result of crypt
+ 3, for instance ! or *,
+ the user will not be able to use a unix password to log in
+ (but the user may log in the system by other means).
+