lslogins: explain password statuses

Signed-off-by: Karel Zak <kzak@redhat.com>

diff --git a/login-utils/lslogins.1.adoc b/login-utils/lslogins.1.adoc
index 5d3111252a6f6ae50eb2dd6c311f00e2ffb7b25f..73991e7762ef79a4bd44a7ef23bb917597813cbf 100644 (file)
--- a/login-utils/lslogins.1.adoc
+++ b/login-utils/lslogins.1.adoc
@@ -119,6 +119,19 @@ if a serious error occurs (e.g., a corrupt log).
 
 The default UID thresholds are read from _/etc/login.defs_.
 
+=== Password status
+
+Multiple fields describe password status.
+
+*"Login by password disabled"*::
+'yes' means that there is no valid password. The password hash is missing, or the hash method is unknown or contains invalid chars.
+
+*"Password not required (empty)"*::
+The password is not set (hash is missing); this is common for locked system accounts. Not requiring a password does not mean the user can log-in without a password. It depends on the password "lock" status.
+
+*"Password is locked"*::
+The password is prefixed by '!!', and the user cannot login although the password is set.
+
 == HISTORY
 
 The *lslogins* utility is inspired by the *logins* utility, which first appeared in FreeBSD 4.10.