KERBSHELL_CHANGE.CGI

Kerbshell_change.cgi is the complement of lock.cgi and rats_lock. This tool is meant to be ran by a user who's shell was changed to kerbshell. It prompts the user for all private information    and a new passwords. It sends all this information together with the appropriate kerberos realm to the main RATS server which does a password change. The password change is done only if the private information matches the principle to be changed (either by making sure that the principle given is the user's own IID or one of his/her usernames). If the password change is successful, then the users shell is changed again to a "normal" shell as defined in rats.conf under %SHELL_LOCKS.

None of these operations happen unless the user has a kerberos type entry in the password file, and has its shell set to "kerbshell" as defined in rats.conf and rats_lock.