1    /GENERATE_PASSWORD

       /GENERATE_PASSWORD[=keyword]
       /NOGENERATE_PASSWORD (default)

    Invokes the password generator to create user passwords.
    Generated passwords can consist of 1 to 10 characters. Specify
    one of the following keywords:

    BOTH       Generate primary and secondary passwords.

    CURRENT    Do whatever the DEFAULT account does (for example,
               generate primary, secondary, both, or no passwords).
               This is the default keyword.

    PRIMARY    Generate primary password only.

    SECONDARY  Generate secondary password only.

    When you modify a password, the new password expires
    automatically; it is valid only once (unless you specify
    /NOPWDEXPIRED). On login, users are forced to change their
    passwords (unless you specify /FLAGS=DISFORCE_PWD_CHANGE).

    Note that the /GENERATE_PASSWORD and /PASSWORD qualifiers are
    mutually exclusive.

2    /MODIFY_IDENTIFIER

       /MODIFY_IDENTIFIER (default)
       /NOMODIFY_IDENTIFIER

    Specifies whether the identifier associated with the user is
    to be modified in the rights database. This qualifier applies
    only when you modify the UIC or user name in the UAF record. By
    default, the associated identifiers are modified.

3    /PASSWORD

       /PASSWORD=(password1[,password2])
       /NOPASSWORD

    Specifies up to two passwords for login. Passwords can be from 0
    to 32 alphanumeric characters in length. The dollar sign ($)  and
    underscore (_)  are also permitted.

    Uppercase and lowercase characters are equivalent. All lowercase
    characters are converted to uppercase before the password is
    encrypted. Avoid using the word password as the actual password.

    Use the /PASSWORD qualifier as follows:

    o  To set only the first password and clear the second, specify
       /PASSWORD=password.

    o  To set both the first and second password, specify
       /PASSWORD=(password1, password2).

    o  To change the first password without affecting the second,
       specify /PASSWORD=(password, "").

    o  To change the second password without affecting the first,
       specify /PASSWORD=("", password).

    o  To set both passwords to null, specify /NOPASSWORD.

    When you modify a password, the new password expires
    automatically; it is valid only once (unless you specify
    /NOPWDEXPIRED). On login, the user is forced to change the
    password (unless you specify /FLAGS=DISFORCE_PWD_CHANGE).

    Note that the /GENERATE_PASSWORD and /PASSWORD qualifiers are
    mutually exclusive.

    When you create a new UAF record with the RENAME command, you
    must specify a password.