5.6. Additional commands for changing user passwords

You can also change the password for an IdM user using the following commands:

Expand

표 5.1. Additional commands for changing user passwords
Command	Description	Limitations
`passwd`	A user can change their own password using PAM service facilities and the `pam_sss` module to interact with SSSD	The system must be enrolled in IdM and SSSD must be configured.
`kpasswd`	A user can change their own password directly via the Kerberos protocol	The user must have a valid Kerberos ticket (TGT); does not require system enrollment.
`ipa passwd`	An administrator or user can change a password through the IdM API	Requires an active Kerberos ticket and the `ipa-client` packages installed.
`ldappasswd`	An administrator or user can change a password directly via LDAP	Requires LDAP credentials (Bind DN) and direct network access to the Directory Server.