.\"
.\" "$Id: lppasswd.man 11022 2013-06-06 22:14:09Z msweet $"
.\"
.\"   lpadmin man page for CUPS.
.\"
.\"   Copyright 2007-2013 by Apple Inc.
.\"   Copyright 1997-2006 by Easy Software Products.
.\"
.\"   These coded instructions, statements, and computer programs are the
.\"   property of Apple Inc. and are protected by Federal copyright
.\"   law.  Distribution and use rights are outlined in the file "LICENSE.txt"
.\"   which should have been included with this file.  If this file is
.\"   file is missing or damaged, see the license at "http://www.cups.org/".
.\"
.TH lppasswd 1 "CUPS" "22 February 2008" "Apple Inc."
.SH NAME
lppasswd \- add, change, or delete digest passwords.
.SH SYNOPSIS
.B lppasswd
[
.I username
]
.br
.B lppasswd
\-a [ \-g
.I groupname
]
.I username
.br
.B lppasswd
\-x
.I username
.SH DESCRIPTION
\fIlppasswd\fR adds, changes, or deletes passwords in the CUPS
digest password file, \fIpasswd.md5\fR. When run by a normal
user, \fIlppasswd\fR will prompt for the old and new passwords.
When run by the super-user, \fIlppasswd\fR can add new accounts
(\fI-a username\fR), change existing accounts (\fIusername\fR),
or delete accounts (\fI-x username\fR) in the digest password
file. Digest usernames do not have to match local UNIX usernames.
.SH OPTIONS
\fIlppasswd\fR supports the following options:
.TP 5
\-g groupname
.br
Specifies a group other than the default system group.
.SH SECURITY ISSUES
By default, the \fIlppasswd\fR program is not installed to allow ordinary
users to change their passwords. To enable this, the \fIlppasswd\fR command
must be made setuid to root with the command:
.br
.nf
.RS
chmod u+s lppasswd
.RE
.fi
This change will be overridden by further updates of the cups\-client package.
The following command ensures that it will be preserved:
.nf
.RS
dpkg-statoverride \-\-add root root 4755 /usr/bin/lppasswd
.RE
.fi
.PP
While every attempt has been made to make \fIlppasswd\fR secure against
exploits that could grant super-user privileges to unprivileged users,
paranoid system administrators may wish to use Basic authentication with
accounts managed by PAM instead.
.SH SEE ALSO
\fIlp(1)\fR, \fIlpr(1)\fR,
.br
http://localhost:631/help
.SH COPYRIGHT
Copyright 2007-2013 by Apple Inc.
.\"
.\" End of "$Id: lppasswd.man 11022 2013-06-06 22:14:09Z msweet $".
.\"