[Pkg-shadow-commits] r2914 - in upstream/trunk: . man

[Nicolas FRANÇOIS]

Author: nekral-guest
Date: 2009-05-11 19:29:38 +0000 (Mon, 11 May 2009)
New Revision: 2914

Modified:
   upstream/trunk/ChangeLog
   upstream/trunk/man/newusers.8.xml
Log:
	* man/newusers.8.xml: PAM enabled version: describe how passwords
	are updated and how newusers behave in case of error.


Modified: upstream/trunk/ChangeLog
===================================================================
--- upstream/trunk/ChangeLog	2009-05-11 13:51:52 UTC (rev 2913)
+++ upstream/trunk/ChangeLog	2009-05-11 19:29:38 UTC (rev 2914)
@@ -1,3 +1,8 @@
+2009-05-11  Nicolas François  <nicolas.francois at centraliens.net>
+
+	* man/newusers.8.xml: PAM enabled version: describe how passwords
+	are updated and how newusers behave in case of error.
+
 2009-05-10  Nicolas François  <nicolas.francois at centraliens.net>
 
 	* NEWS, configure.in: New release will be 4.1.4.

Modified: upstream/trunk/man/newusers.8.xml
===================================================================
--- upstream/trunk/man/newusers.8.xml	2009-05-11 13:51:52 UTC (rev 2913)
+++ upstream/trunk/man/newusers.8.xml	2009-05-11 19:29:38 UTC (rev 2914)
@@ -211,6 +211,13 @@
       databases. If an error occurs (except in the final writes to the
       databases), no changes are committed to the databases.
     </para>
+    <para condition="pam">
+      During this first pass, users are created with a locked password
+      (and passwords are not changed for the users which are not created).
+      A second pass is used to update the passwords using PAM.  Failures
+      to update a password are reported, but will not stop the other
+      password updates.
+    </para>
 
     <para>
       This command is intended to be used in a large system environment
@@ -297,12 +304,6 @@
       The input file must be protected since it contains unencrypted
       passwords.
     </para>
-    <para condition="pam">
-      PAM is not used to update the passwords.
-      Only <filename>/etc/passwd</filename> and
-      <filename>/etc/shadow</filename> are updated, and the various checks
-      or options provided by PAM modules are not used.
-    </para>
   </refsect1>
 
   <refsect1 id='configuration'>