Generating Passwords by Using dcecp
If a pwd_val_type ERA having the values 2 (USER_CAN_SELECT) or 3 (GENERATION_REQUIRED) exists for a principal, that principal can (or will be required to) request a generated password when he changes passwords. If you are the principal smitty, the following sequence of dcecp commands can be used to do this:
dcecp> set p [account generate smitty]
newgenpwd
dcecp>
This command requests a generated password from the password management server, places the new password in the p variable, and prints it to the screen (newgenpwd). (Be sure to remember the new password.) Next, pass the value stored in p as the value of new password in an account modify or account create command:
dcecp> account modify smitty -password $p -mypwd -dce-
dcecp>
Warning: Never execute the following dcecp command, since the password will be changed in the account, but the user will not see the new password:
dcecp> acct mod smitty -password [acct gen smitty] \
-mypwd -dce-
dcecp>