diff -up shadow-4.1.5.1/man/chage.1.xml.manfix shadow-4.1.5.1/man/chage.1.xml
--- shadow-4.1.5.1/man/chage.1.xml.manfix 2012-05-25 13:45:27.000000000 +0200
+++ shadow-4.1.5.1/man/chage.1.xml 2018-04-24 16:43:48.545743715 +0200
@@ -102,6 +102,9 @@
Set the number of days since January 1st, 1970 when the password
was last changed. The date may also be expressed in the format
YYYY-MM-DD (or the format more commonly used in your area).
+ If the LAST_DAY is set to
+ 0 the user is forced to change his password
+ on the next log on.
@@ -123,6 +126,13 @@
EXPIRE_DATE will remove an account
expiration date.
+
+ For example the following command can be used
+ to set an account to expire in 180 days:
+
+
+ chage -E $(date -d +180days +%Y-%m-%d)
+
diff -up shadow-4.1.5.1/man/groupmems.8.xml.manfix shadow-4.1.5.1/man/groupmems.8.xml
--- shadow-4.1.5.1/man/groupmems.8.xml.manfix 2012-05-25 13:45:28.000000000 +0200
+++ shadow-4.1.5.1/man/groupmems.8.xml 2015-12-18 12:27:08.466909647 +0100
@@ -194,6 +194,13 @@
$ chown root.groups groupmems
$ groupmems -g groups -a gk4
+
+
+ In the Red Hat Enterprise Linux 7 the groupmems
+ command is not setuid and regular users cannot use it to manipulate
+ the membership of their own group. This might change in future
+ major releases of the Red Hat Enterprise Linux.
+
diff -up shadow-4.1.5.1/man/ja/man5/login.defs.5.manfix shadow-4.1.5.1/man/ja/man5/login.defs.5
--- shadow-4.1.5.1/man/ja/man5/login.defs.5.manfix 2012-05-25 13:45:27.000000000 +0200
+++ shadow-4.1.5.1/man/ja/man5/login.defs.5 2015-12-18 12:34:08.080715842 +0100
@@ -147,10 +147,6 @@ 以下の参照表は、
shadow パスワード機能のどのプログラムが
どのパラメータを使用するかを示したものである。
.na
-.IP chfn 12
-CHFN_AUTH CHFN_RESTRICT
-.IP chsh 12
-CHFN_AUTH
.IP groupadd 12
GID_MAX GID_MIN
.IP newusers 12
diff -up shadow-4.1.5.1/man/login.defs.5.xml.manfix shadow-4.1.5.1/man/login.defs.5.xml
--- shadow-4.1.5.1/man/login.defs.5.xml.manfix 2012-05-25 13:45:28.000000000 +0200
+++ shadow-4.1.5.1/man/login.defs.5.xml 2014-08-29 13:31:38.364812323 +0200
@@ -160,6 +160,17 @@
long numeric parameters is machine-dependent.
+
+ Please note that the parameters in this configuration file control the
+ behavior of the tools from the shadow-utils component. None of these
+ tools uses the PAM mechanism, and the utilities that use PAM (such as the
+ passwd command) should be configured elsewhere. The only values that
+ affect PAM modules are ENCRYPT_METHOD and SHA_CRYPT_MAX_ROUNDS
+ for pam_unix module, FAIL_DELAY for pam_faildelay module,
+ and UMASK for pam_umask module. Refer to
+ pam(8) for more information.
+
+
The following configuration items are provided:
@@ -248,26 +258,6 @@
- chfn
-
-
- CHFN_AUTH
- CHFN_RESTRICT
- LOGIN_STRING
-
-
-
-
- chgpasswd
-
-
- ENCRYPT_METHOD MAX_MEMBERS_PER_GROUP MD5_CRYPT_ENAB
- SHA_CRYPT_MAX_ROUNDS
- SHA_CRYPT_MIN_ROUNDS
-
-
-
- chpasswd
@@ -278,14 +268,6 @@
-
- chsh
-
-
- CHSH_AUTH LOGIN_STRING
-
-
-
@@ -346,34 +328,6 @@
-
- login
-
-
- CONSOLE
- CONSOLE_GROUPS DEFAULT_HOME
- ENV_HZ ENV_PATH ENV_SUPATH
- ENV_TZ ENVIRON_FILE
- ERASECHAR FAIL_DELAY
- FAILLOG_ENAB
- FAKE_SHELL
- FTMP_FILE
- HUSHLOGIN_FILE
- ISSUE_FILE
- KILLCHAR
- LASTLOG_ENAB
- LOGIN_RETRIES
- LOGIN_STRING
- LOGIN_TIMEOUT LOG_OK_LOGINS LOG_UNKFAIL_ENAB
- MAIL_CHECK_ENAB MAIL_DIR MAIL_FILE
- MOTD_FILE NOLOGINS_FILE PORTTIME_CHECKS_ENAB
- QUOTAS_ENAB
- TTYGROUP TTYPERM TTYTYPE_FILE
- ULIMIT UMASK
- USERGROUPS_ENAB
-
-
- newgrp / sg
@@ -399,17 +353,6 @@
-
- passwd
-
-
- ENCRYPT_METHOD MD5_CRYPT_ENAB OBSCURE_CHECKS_ENAB
- PASS_ALWAYS_WARN PASS_CHANGE_TRIES PASS_MAX_LEN PASS_MIN_LEN
- SHA_CRYPT_MAX_ROUNDS
- SHA_CRYPT_MIN_ROUNDS
-
-
- pwck
@@ -436,32 +379,6 @@
-
- su
-
-
- CONSOLE
- CONSOLE_GROUPS DEFAULT_HOME
- ENV_HZ ENVIRON_FILE
- ENV_PATH ENV_SUPATH
- ENV_TZ LOGIN_STRING MAIL_CHECK_ENAB
- MAIL_DIR MAIL_FILE QUOTAS_ENAB
- SULOG_FILE SU_NAME
- SU_WHEEL_ONLY
- SYSLOG_SU_ENAB
- USERGROUPS_ENAB
-
-
-
-
- sulogin
-
-
- ENV_HZ
- ENV_TZ
-
-
- useradd
diff -up shadow-4.1.5.1/man/useradd.8.xml.manfix shadow-4.1.5.1/man/useradd.8.xml
--- shadow-4.1.5.1/man/useradd.8.xml.manfix 2015-12-17 14:05:47.930742412 +0100
+++ shadow-4.1.5.1/man/useradd.8.xml 2015-12-17 14:05:47.945742754 +0100
@@ -134,8 +134,8 @@
HOME_DIR is not specified.
BASE_DIR is
concatenated with the account name to define the home directory.
- If the option is not used,
- BASE_DIR must exist.
+ The BASE_DIR must exist otherwise
+ the home directory cannot be created.
If this option is not specified, useradd
@@ -161,7 +161,7 @@
- ,
+ ,
HOME_DIR
@@ -171,8 +171,7 @@
login directory. The default is to append the
LOGIN name to
BASE_DIR and use that as the login
- directory name. The directory HOME_DIR
- does not have to exist but will not be created if it is missing.
+ directory name.
@@ -358,11 +357,16 @@
is not enabled, no home
directories are created.
+
+ The directory where the user's home directory is created must
+ exist and have proper SELinux context and permissions. Otherwise
+ the user's home directory cannot be created or accessed.
+
-
+ ,
diff -up shadow-4.1.5.1/man/usermod.8.xml.manfix shadow-4.1.5.1/man/usermod.8.xml
--- shadow-4.1.5.1/man/usermod.8.xml.manfix 2012-05-25 13:45:29.000000000 +0200
+++ shadow-4.1.5.1/man/usermod.8.xml 2014-08-29 13:33:40.814632618 +0200
@@ -132,7 +132,8 @@
If the
option is given, the contents of the current home directory will
be moved to the new home directory, which is created if it does
- not already exist.
+ not already exist. If the current home directory does not exist
+ the new home directory will not be created.
@@ -261,7 +262,8 @@
Move the content of the user's home directory to the new
- location.
+ location. If the current home directory does not exist
+ the new home directory will not be created.
This option is only valid in combination with the