kpasswd(1) on Solnix vs Linux and the BSDs
On Solnix, kpasswd is the illumos /usr/bin/kpasswd. It takes one optional principal operand and no options. NetBSD kpasswd is a different client with --admin-principal and -c/--cache options, and it accepts several principals.
The manual pages
- Solnix: kpasswd(1) from
pkgs.solnix.illumos-world-man· illumos.org - FreeBSD: kpasswd(1) 15.1-RELEASE
- NetBSD: kpasswd(1) 11.0
What Solnix runs
A default Solnix system runs the illumos kpasswd at /usr/bin/kpasswd. No other variants are shipped. The page is published by pkgs.solnix.illumos-world-man.
Differences
| Compared with | Topic | What differs |
|---|---|---|
| NetBSD | options | Solnix kpasswd has no options, only an optional principal. NetBSD kpasswd accepts --admin-principal=principal and -c cache or --cache=cache. A NetBSD command line using these fails to match the Solnix synopsis.Source: Solnix kpasswd(1) SYNOPSIS; NetBSD kpasswd(1) SYNOPSIS, DESCRIPTION |
| NetBSD | number of principals | Solnix kpasswd takes at most one principal. NetBSD kpasswd takes a list of principals and can change several passwords in one run, using the administrator principal. Source: Solnix kpasswd(1) SYNOPSIS, OPERANDS; NetBSD kpasswd(1) SYNOPSIS, DESCRIPTION |
| NetBSD | authenticating as an administrator | NetBSD kpasswd can change a password using a separate administrator principal, or the principal of the default credential cache. The Solnix page describes no such mode. It prompts for the current password of the target principal and obtains a changepw ticket. Source: NetBSD kpasswd(1) DESCRIPTION; Solnix kpasswd(1) DESCRIPTION |
| FreeBSD | default principal | With no operand, FreeBSD kpasswd uses the principal from an existing ccache if there is one, then falls back to the invoking user. The Solnix page says only that the principal is derived from the identity of the invoking user. Source: FreeBSD kpasswd(1) OPTIONS (principal); Solnix kpasswd(1) OPERANDS (principal) |
| FreeBSD | changepw ticket | The Solnix page says kpasswd obtains a changepw ticket from the KDC for the user's realm before prompting for the new password. The FreeBSD page does not mention a changepw ticket. Source: Solnix kpasswd(1) DESCRIPTION; FreeBSD kpasswd(1) DESCRIPTION |
| FreeBSD, NetBSD | suspended kpasswd | The Solnix page documents that if kpasswd is suspended, the changepw tickets may not be destroyed. Neither the FreeBSD nor the NetBSD page documents this. Source: Solnix kpasswd(1) BUGS; FreeBSD kpasswd(1); NetBSD kpasswd(1) |
| FreeBSD, NetBSD | related pages | Solnix points to kerberos(7). FreeBSD points to kadmin, kadmind and kerberos. NetBSD points to kpasswdd(8). FreeBSD documents kerberos environment variables via its kerberos page. The Solnix page lists no environment variables. Source: Solnix kpasswd(1) SEE ALSO; FreeBSD kpasswd(1) ENVIRONMENT, SEE ALSO; NetBSD kpasswd(1) SEE ALSO |
| Linux, OpenBSD | no counterpart in bundle | The bundle has no Linux or OpenBSD kpasswd page, so nothing is claimed about those systems. Source: Bundle header (counterparts: FreeBSD, NetBSD only) |
Standards
- POSIX: kpasswd is not a POSIX.1-2024 utility.
- Solnix: The ATTRIBUTES section lists the attribute type CSI with value Enabled.
Writing portable scripts
- Call kpasswd with at most one principal operand and no options if the script must run on both Solnix and the BSDs;
--admin-principaland-cexist only in the NetBSD synopsis.
Every difference here is taken from the manual pages linked above: Solnix's published page, Linux (man-pages and the GNU and util-linux manuals), FreeBSD, OpenBSD and NetBSD. Each row names its source. Where a manual is silent, this page is too. Compiled 2026-10-26. Found a mistake? Mail hackers@lists.solnix.io.