Allowing users to generate passwords
In the
Account Manager,
select a user name, then select Password Restrictions
from the Users menu, then select Selection.
You can choose to have the system generate passwords automatically for users. This guards against users picking ``obvious'' passwords that a knowledgeable intruder could guess, given some personal facts about the user.
To permit users to generate (but not choose) a new password, set User can run generator to Yes. To use the system default value, set it to Default.
To change the system default value, use this command line:
usermod -D -x "{passwdRunGenerator value}"
where value is either 1 (the user can run the generator) or 0 (the user cannot).
You can change the value for an individual user with the usermod(ADM) command by omiting the -D option and appending the user name to the above command.