2007-10-07 17:16:16 +05:30
|
|
|
<?xml version="1.0" encoding="UTF-8"?>
|
2008-10-11 17:14:43 +05:30
|
|
|
<!--
|
2021-12-05 21:05:27 +05:30
|
|
|
SPDX-FileCopyrightText: 1990 , Julianne Frances Haugh
|
|
|
|
SPDX-FileCopyrightText: 2007 - 2011, Nicolas François
|
|
|
|
SPDX-License-Identifier: BSD-3-Clause
|
2008-10-11 17:14:43 +05:30
|
|
|
-->
|
* man/chfn.1.xml: Uses CHFN_AUTH, CHFN_RESTRICT, LOGIN_STRING.
* man/chgpasswd.8.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP,
MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS (SHA_CRYPT_MAX_ROUNDS).
* man/chpasswd.8.xml: Switch to using entities for ENCRYPT_METHOD,
MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS (SHA_CRYPT_MAX_ROUNDS).
* man/chsh.1.xml: Uses CHSH_AUTH, LOGIN_STRING.
* man/expiry.1.xml: Does not use any login.defs parameter.
* man/gpasswd.1.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP,
MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS.
* man/login.defs.5.xml: Added CHSH_AUTH.
* man/login.defs.5.xml: Cross reference -> cross references.
* man/login.defs.5.xml: chfn only uses CHFN_AUTH when no_pam.
* man/login.defs.5.xml: chsh uses CHSH_AUTH, not CHFN_AUTH.
* man/login.defs.d/CHSH_AUTH.xml: Added.
* man/login.defs.5.xml: chsh uses parameters only when no_pam.
* man/login.defs.5.xml: expiry does not use CONSOLE_GROUPS, even
if linked in the binary.
* man/newusers.8.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP,
MD5_CRYPT_ENAB, PASS_MAX_DAYS, PASS_MIN_DAYS, PASS_WARN_AGE,
SHA_CRYPT_MIN_ROUNDS, UMASK.
2007-11-27 04:57:56 +05:30
|
|
|
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook V4.5//EN"
|
|
|
|
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
|
|
|
|
<!ENTITY CHSH_AUTH SYSTEM "login.defs.d/CHSH_AUTH.xml">
|
|
|
|
<!ENTITY LOGIN_STRING SYSTEM "login.defs.d/LOGIN_STRING.xml">
|
2011-07-09 01:19:09 +05:30
|
|
|
<!-- SHADOW-CONFIG-HERE -->
|
* man/chfn.1.xml: Uses CHFN_AUTH, CHFN_RESTRICT, LOGIN_STRING.
* man/chgpasswd.8.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP,
MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS (SHA_CRYPT_MAX_ROUNDS).
* man/chpasswd.8.xml: Switch to using entities for ENCRYPT_METHOD,
MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS (SHA_CRYPT_MAX_ROUNDS).
* man/chsh.1.xml: Uses CHSH_AUTH, LOGIN_STRING.
* man/expiry.1.xml: Does not use any login.defs parameter.
* man/gpasswd.1.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP,
MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS.
* man/login.defs.5.xml: Added CHSH_AUTH.
* man/login.defs.5.xml: Cross reference -> cross references.
* man/login.defs.5.xml: chfn only uses CHFN_AUTH when no_pam.
* man/login.defs.5.xml: chsh uses CHSH_AUTH, not CHFN_AUTH.
* man/login.defs.d/CHSH_AUTH.xml: Added.
* man/login.defs.5.xml: chsh uses parameters only when no_pam.
* man/login.defs.5.xml: expiry does not use CONSOLE_GROUPS, even
if linked in the binary.
* man/newusers.8.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP,
MD5_CRYPT_ENAB, PASS_MAX_DAYS, PASS_MIN_DAYS, PASS_WARN_AGE,
SHA_CRYPT_MIN_ROUNDS, UMASK.
2007-11-27 04:57:56 +05:30
|
|
|
]>
|
|
|
|
|
2007-10-07 17:17:01 +05:30
|
|
|
<refentry id='chsh.1'>
|
2007-11-11 05:16:11 +05:30
|
|
|
<!-- $Id$ -->
|
2012-05-25 17:15:21 +05:30
|
|
|
<refentryinfo>
|
|
|
|
<author>
|
|
|
|
<firstname>Julianne Frances</firstname>
|
|
|
|
<surname>Haugh</surname>
|
|
|
|
<contrib>Creation, 1990</contrib>
|
|
|
|
</author>
|
|
|
|
<author>
|
|
|
|
<firstname>Thomas</firstname>
|
|
|
|
<surname>Kłoczko</surname>
|
|
|
|
<email>kloczek@pld.org.pl</email>
|
|
|
|
<contrib>shadow-utils maintainer, 2000 - 2007</contrib>
|
|
|
|
</author>
|
|
|
|
<author>
|
|
|
|
<firstname>Nicolas</firstname>
|
|
|
|
<surname>François</surname>
|
|
|
|
<email>nicolas.francois@centraliens.net</email>
|
|
|
|
<contrib>shadow-utils maintainer, 2007 - now</contrib>
|
|
|
|
</author>
|
|
|
|
</refentryinfo>
|
2007-10-07 17:16:16 +05:30
|
|
|
<refmeta>
|
|
|
|
<refentrytitle>chsh</refentrytitle>
|
|
|
|
<manvolnum>1</manvolnum>
|
|
|
|
<refmiscinfo class="sectdesc">User Commands</refmiscinfo>
|
2011-07-09 01:19:09 +05:30
|
|
|
<refmiscinfo class="source">shadow-utils</refmiscinfo>
|
|
|
|
<refmiscinfo class="version">&SHADOW_UTILS_VERSION;</refmiscinfo>
|
2007-10-07 17:16:16 +05:30
|
|
|
</refmeta>
|
|
|
|
<refnamediv id='name'>
|
|
|
|
<refname>chsh</refname>
|
|
|
|
<refpurpose>change login shell</refpurpose>
|
|
|
|
</refnamediv>
|
|
|
|
|
|
|
|
<refsynopsisdiv id='synopsis'>
|
|
|
|
<cmdsynopsis>
|
2007-10-07 17:17:01 +05:30
|
|
|
<command>chsh</command>
|
2007-10-07 17:17:57 +05:30
|
|
|
<arg choice='opt'>
|
|
|
|
<replaceable>options</replaceable>
|
|
|
|
</arg>
|
|
|
|
<arg choice='opt'>
|
|
|
|
<replaceable>LOGIN</replaceable>
|
2007-10-07 17:16:16 +05:30
|
|
|
</arg>
|
|
|
|
</cmdsynopsis>
|
|
|
|
</refsynopsisdiv>
|
2007-10-07 17:17:01 +05:30
|
|
|
|
2007-10-07 17:16:16 +05:30
|
|
|
<refsect1 id='description'>
|
|
|
|
<title>DESCRIPTION</title>
|
2007-10-07 17:17:01 +05:30
|
|
|
<para>
|
2007-10-07 20:06:51 +05:30
|
|
|
The <command>chsh</command> command changes the user login shell.
|
|
|
|
This determines the name of the user's initial login command. A normal
|
2010-08-29 01:46:18 +05:30
|
|
|
user may only change the login shell for her own account; the
|
2007-10-07 20:06:51 +05:30
|
|
|
superuser may change the login shell for any account.
|
2007-10-07 17:16:16 +05:30
|
|
|
</para>
|
2007-10-07 17:17:01 +05:30
|
|
|
|
2007-10-07 17:16:16 +05:30
|
|
|
</refsect1>
|
2007-10-07 17:17:01 +05:30
|
|
|
|
2007-10-07 17:16:16 +05:30
|
|
|
<refsect1 id='options'>
|
|
|
|
<title>OPTIONS</title>
|
2007-10-07 17:17:57 +05:30
|
|
|
<para>
|
|
|
|
The options which apply to the <command>chsh</command> command are:
|
|
|
|
</para>
|
|
|
|
<variablelist remap='IP'>
|
|
|
|
<varlistentry>
|
|
|
|
<term><option>-h</option>, <option>--help</option></term>
|
|
|
|
<listitem>
|
|
|
|
<para>Display help message and exit.</para>
|
|
|
|
</listitem>
|
|
|
|
</varlistentry>
|
2011-11-07 00:08:32 +05:30
|
|
|
<varlistentry>
|
|
|
|
<term>
|
2013-08-23 03:24:34 +05:30
|
|
|
<option>-R</option>, <option>--root</option> <replaceable>CHROOT_DIR</replaceable>
|
2011-11-07 00:08:32 +05:30
|
|
|
</term>
|
|
|
|
<listitem>
|
|
|
|
<para>
|
|
|
|
Apply changes in the <replaceable>CHROOT_DIR</replaceable>
|
|
|
|
directory and use the configuration files from the
|
|
|
|
<replaceable>CHROOT_DIR</replaceable> directory.
|
2022-07-27 20:36:36 +05:30
|
|
|
Only absolute paths are supported.
|
2011-11-07 00:08:32 +05:30
|
|
|
</para>
|
|
|
|
</listitem>
|
|
|
|
</varlistentry>
|
2007-10-07 17:17:57 +05:30
|
|
|
<varlistentry>
|
|
|
|
<term>
|
2013-08-23 03:24:34 +05:30
|
|
|
<option>-s</option>, <option>--shell</option> <replaceable>SHELL</replaceable>
|
2007-10-07 17:17:57 +05:30
|
|
|
</term>
|
|
|
|
<listitem>
|
|
|
|
<para>
|
|
|
|
The name of the user's new login shell. Setting this field to
|
|
|
|
blank causes the system to select the default login shell.
|
|
|
|
</para>
|
|
|
|
</listitem>
|
|
|
|
</varlistentry>
|
|
|
|
</variablelist>
|
2007-10-07 17:17:01 +05:30
|
|
|
<para>
|
|
|
|
If the <option>-s</option> option is not selected,
|
2007-10-07 17:16:16 +05:30
|
|
|
<command>chsh</command> operates in an interactive fashion, prompting
|
|
|
|
the user with the current login shell. Enter the new value to change
|
|
|
|
the shell, or leave the line blank to use the current one. The current
|
2007-10-07 17:17:01 +05:30
|
|
|
shell is displayed between a pair of <emphasis>[ ]</emphasis> marks.
|
2007-10-07 17:16:16 +05:30
|
|
|
</para>
|
|
|
|
</refsect1>
|
2007-10-07 17:17:57 +05:30
|
|
|
|
|
|
|
<refsect1 id='note'>
|
|
|
|
<title>NOTE</title>
|
|
|
|
<para>
|
|
|
|
The only restriction placed on the login shell is that the command
|
|
|
|
name must be listed in <filename>/etc/shells</filename>, unless the
|
2007-10-07 20:06:51 +05:30
|
|
|
invoker is the superuser, and then any value may be added. An
|
2007-10-07 17:17:57 +05:30
|
|
|
account with a restricted login shell may not change her login shell.
|
|
|
|
For this reason, placing <filename>/bin/rsh</filename> in
|
|
|
|
<filename>/etc/shells</filename> is discouraged since accidentally
|
|
|
|
changing to a restricted shell would prevent the user from ever
|
|
|
|
changing her login shell back to its original value.
|
|
|
|
</para>
|
|
|
|
</refsect1>
|
* man/chfn.1.xml: Uses CHFN_AUTH, CHFN_RESTRICT, LOGIN_STRING.
* man/chgpasswd.8.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP,
MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS (SHA_CRYPT_MAX_ROUNDS).
* man/chpasswd.8.xml: Switch to using entities for ENCRYPT_METHOD,
MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS (SHA_CRYPT_MAX_ROUNDS).
* man/chsh.1.xml: Uses CHSH_AUTH, LOGIN_STRING.
* man/expiry.1.xml: Does not use any login.defs parameter.
* man/gpasswd.1.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP,
MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS.
* man/login.defs.5.xml: Added CHSH_AUTH.
* man/login.defs.5.xml: Cross reference -> cross references.
* man/login.defs.5.xml: chfn only uses CHFN_AUTH when no_pam.
* man/login.defs.5.xml: chsh uses CHSH_AUTH, not CHFN_AUTH.
* man/login.defs.d/CHSH_AUTH.xml: Added.
* man/login.defs.5.xml: chsh uses parameters only when no_pam.
* man/login.defs.5.xml: expiry does not use CONSOLE_GROUPS, even
if linked in the binary.
* man/newusers.8.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP,
MD5_CRYPT_ENAB, PASS_MAX_DAYS, PASS_MIN_DAYS, PASS_WARN_AGE,
SHA_CRYPT_MIN_ROUNDS, UMASK.
2007-11-27 04:57:56 +05:30
|
|
|
|
|
|
|
<refsect1 id='configuration' condition="no_pam">
|
|
|
|
<title>CONFIGURATION</title>
|
|
|
|
<para>
|
|
|
|
The following configuration variables in
|
|
|
|
<filename>/etc/login.defs</filename> change the behavior of this
|
|
|
|
tool:
|
|
|
|
</para>
|
|
|
|
<variablelist>
|
|
|
|
&CHSH_AUTH;
|
|
|
|
&LOGIN_STRING;
|
|
|
|
</variablelist>
|
|
|
|
</refsect1>
|
2007-10-07 17:17:01 +05:30
|
|
|
|
2007-10-07 17:16:16 +05:30
|
|
|
<refsect1 id='files'>
|
|
|
|
<title>FILES</title>
|
|
|
|
<variablelist>
|
|
|
|
<varlistentry>
|
2007-10-07 17:17:01 +05:30
|
|
|
<term><filename>/etc/passwd</filename></term>
|
|
|
|
<listitem>
|
2007-10-07 17:17:33 +05:30
|
|
|
<para>User account information.</para>
|
2007-10-07 17:17:01 +05:30
|
|
|
</listitem>
|
|
|
|
</varlistentry>
|
|
|
|
<varlistentry>
|
|
|
|
<term><filename>/etc/shells</filename></term>
|
|
|
|
<listitem>
|
2007-10-07 17:17:33 +05:30
|
|
|
<para>List of valid login shells.</para>
|
2007-10-07 17:17:01 +05:30
|
|
|
</listitem>
|
2007-10-07 17:16:16 +05:30
|
|
|
</varlistentry>
|
|
|
|
<varlistentry>
|
2007-10-07 17:17:01 +05:30
|
|
|
<term><filename>/etc/login.defs</filename></term>
|
|
|
|
<listitem>
|
2007-10-07 17:17:33 +05:30
|
|
|
<para>Shadow password suite configuration.</para>
|
2007-10-07 17:17:01 +05:30
|
|
|
</listitem>
|
2007-10-07 17:16:16 +05:30
|
|
|
</varlistentry>
|
|
|
|
</variablelist>
|
|
|
|
</refsect1>
|
2007-10-07 17:17:01 +05:30
|
|
|
|
2007-10-07 17:16:16 +05:30
|
|
|
<refsect1 id='see_also'>
|
|
|
|
<title>SEE ALSO</title>
|
2007-10-07 17:17:01 +05:30
|
|
|
<para>
|
|
|
|
<citerefentry>
|
|
|
|
<refentrytitle>chfn</refentrytitle><manvolnum>1</manvolnum>
|
2007-10-07 17:16:16 +05:30
|
|
|
</citerefentry>,
|
|
|
|
<citerefentry>
|
2007-10-07 17:17:01 +05:30
|
|
|
<refentrytitle>login.defs</refentrytitle><manvolnum>5</manvolnum>
|
|
|
|
</citerefentry>,
|
|
|
|
<citerefentry>
|
|
|
|
<refentrytitle>passwd</refentrytitle><manvolnum>5</manvolnum>
|
|
|
|
</citerefentry>.
|
2007-10-07 17:16:16 +05:30
|
|
|
</para>
|
|
|
|
</refsect1>
|
|
|
|
</refentry>
|