1 files changed, 27 insertions, 10 deletions

diff --git a/share/man/man5/passwd.5 b/share/man/man5/passwd.5
index 9628beb96d23..d8869daf724b 100644
--- a/share/man/man5/passwd.5
+++ b/share/man/man5/passwd.5
@@ -57,7 +57,7 @@ User's id.
 .It gid
 User's login group id.
 .It class
-User's general classification (unused).
+User's login class.
 .It change
 Password change time.
 .It expire
@@ -98,18 +98,26 @@ field is empty, no password will be required to gain access to the
 machine.  This is almost invariably a mistake.
 Because these files contain the encrypted user passwords, they should
 not be readable by anyone without appropriate privileges.
+Administrative accounts have a password field containing an asterisk
+.Ql \&*
+which disallows normal logins.
 .Pp
 The group field is the group that the user will be placed in upon login.
-Since this system supports multiple groups (see
+Although this system supports multiple groups (see
 .Xr groups 1 )
-this field currently has little special meaning.
+this field nominates the user's primary groups.
+Secondary group memberships are selected in
+.Pa /etc/group .
 .Pp
 The
 .Ar class
-field is currently unused.  In the near future it will be a key to
-a
+field is a key for a user's login class.
+Login classes are defined in
+.Xr login.conf 5 ,
+which is a
 .Xr termcap 5
-style database of user attributes.
+style database of user attributes, accounting, resource and
+environment settings.
 .Pp
 The
 .Ar change
@@ -117,7 +125,8 @@ field is the number in seconds,
 .Dv GMT ,
 from the epoch, until the
 password for the account must be changed.
-This field may be left empty to turn off the password aging feature.
+This field may be left empty or set to 0 to turn off the
+password aging feature.
 .Pp
 The
 .Ar expire
@@ -125,14 +134,15 @@ field is the number in seconds,
 .Dv GMT ,
 from the epoch, until the
 account expires.
-This field may be left empty to turn off the account aging feature.
+This field may be left empty or set to 0 to turn off the account
+aging feature.
 .Pp
 The
 .Ar gecos
 field normally contains comma (``,'') separated subfields as follows:
 .Pp
 .Bd -unfilled -offset indent
-name		user's full name
+fullname		user's full name
 office		user's office number
 wphone		user's work phone number
 hphone		user's home phone number
@@ -140,7 +150,12 @@ hphone		user's home phone number
 .Pp
 This information is used by the
 .Xr finger 1
-program.
+program, and the first field used by the system mailer.
+If an ampersand
+.Ql \&&
+character appears within the fullname field, programs which
+use this field will substitute it with a capitalized version
+of the account's login name.
 .Pp
 The user's home directory is the full
 .Tn UNIX
@@ -526,7 +541,9 @@ password database, with passwords intact
 .Xr login 1 ,
 .Xr passwd 1 ,
 .Xr getpwent 3 ,
+.Xr login_getclass 3 ,
 .Xr yp 4 ,
+.Xr login.conf 5 ,
 .Xr adduser 8 ,
 .Xr pwd_mkdb 8 ,
 .Xr vipw 8