Changing Fermi domain or Services password on Mac or Linux with Fermilab Kerberos (kpasswd)

Intended for:

Who is the audience of this article?

Scenario/Use case:

Change their Fermi domain (Windows login) or Services account passwords on a Mac or Linux computer.

Instructions:

If your machine has Fermi Kerberos setup on the machine, you can change your Fermi domain (Windows login) or Services password in the following way:

1. Run the command kpasswd from a terminal
   1. To reset your FERMI domain password, use the following command:

kpasswd username@FERMI.WIN.FNAL.GOV

1. 1. To reset your SERVICES domain password, use the following command:

kpasswd username@SERVICES.FNAL.GOV

1. Type in your current password for the domain you are resetting
2. Enter the new password twice

Password Requirements: 

• Minimum of 10 characters
• Three of the four character groups must be used
  • Uppercase
  • Lowercase
  • Numeric
  • Special characters ( !,%,#, and @ are supported )
• The password cannot contain three or more characters from your username
• You cannot reuse any of your last 8 passwords
• Your password cannot contain your username or real name
• The password has a minimum age of 2 days