System Administration Guide
Chapter 1, Administering user accounts

Allowing users to generate passwords

Allowing users to generate passwords

In the Account Manager, select a user name, then select Password Restrictions from the Users menu, then select Selection.

You can choose to have the system generate passwords automatically for users. This guards against users picking ``obvious'' passwords that a knowledgeable intruder could guess, given some personal facts about the user.

To permit users to generate (but not choose) a new password, set User can run generator to Yes. To use the system default value, set it to Default. 

To change the system default value, use this command line:

usermod -D -x "{passwdRunGenerator value}"

where value is either 1 (the user can run the generator) or 0 (the user cannot).

You can change the value for an individual user with the usermod(ADM) command by omiting the -D option and appending the user name to the above command.