NAME
pwck, grpck — password/group file checkers
SYNOPSIS
/usr/sbin/pwck
[-s]
[-l]
[file]
/usr/sbin/grpck
[file]
DESCRIPTION
pwck
scans the default password file or
file
and reports any inconsistencies to standard error.
The checks include validation of the number of fields,
login name, user
ID,
group
ID,
and whether the login directory and optional program exist.
In addition, if the root entry shows a program, it can only
be one of:
/sbin/sh,
/usr/bin/csh,
/usr/bin/ksh,
or
/usr/bin/sh.
The criteria for validation is in
passwd(4)
and is described in the
Managing Systems and Workgroups
manual.
The default password file is
/etc/passwd.
grpck
verifies all entries in the group file
and reports any inconsistencies to standard error.
This verification includes a check of the number of fields,
group name, group ID,
and whether all login names appear in the password file.
The default group file is
/etc/group.
Options
pwck
recognizes the following options:
- -s
Check inconsistencies with the Protected Password database. It calls
authck
-p.
- -l
Check encrypted password lengths that are greater than 8 characters.
If
NIS+
is running with Trusted mode, password lengths must not be
longer than 8 characters.
DIAGNOSTICS
Group entries in
/etc/group
with no login names are flagged.
WARNINGS
Successful password file validation is not sufficient for proper
system operation.
To help maintain consistency with other system databases,
editing of the password file with
vipw
is generally discouraged. Please use
sam,
useradd,
usermod,
userdel,
chfn,
chsh
or
passwd
to edit
/etc/passwd.
DEPENDENCIES
NFS:
pwck
and
grpck
check only the local password and group files.
The Network Information Service database
for password and group files is not checked.
AUTHOR
pwck
was developed by AT&T and HP.
STANDARDS CONFORMANCE
pwck: SVID2, SVID3
grpck: SVID2, SVID3