1 KINIT(1) NetBSD Reference Manual KINIT(1)
4 k
\bki
\bin
\bni
\bit
\bt k
\bka
\bau
\but
\bth
\bh - acquire initial tickets
6 S
\bSY
\bYN
\bNO
\bOP
\bPS
\bSI
\bIS
\bS
7 k
\bki
\bin
\bni
\bit
\bt [-
\b-4
\b4 | -
\b--
\b-5
\b52
\b24
\b4i
\bin
\bni
\bit
\bt] [-
\b-9
\b9 | -
\b--
\b-5
\b52
\b24
\b4c
\bco
\bon
\bnv
\bve
\ber
\brt
\bt] [-
\b--
\b-a
\baf
\bfs
\bsl
\blo
\bog
\bg] [-
\b-c
\bc _
\bc_
\ba_
\bc_
\bh_
\be_
\bn_
\ba_
\bm_
\be |
8 -
\b--
\b-c
\bca
\bac
\bch
\bhe
\be=
\b=_
\bc_
\ba_
\bc_
\bh_
\be_
\bn_
\ba_
\bm_
\be] [-
\b-f
\bf | -
\b--
\b-f
\bfo
\bor
\brw
\bwa
\bar
\brd
\bda
\bab
\bbl
\ble
\be] [-
\b-t
\bt _
\bk_
\be_
\by_
\bt_
\ba_
\bb_
\bn_
\ba_
\bm_
\be |
9 -
\b--
\b-k
\bke
\bey
\byt
\bta
\bab
\bb=
\b=_
\bk_
\be_
\by_
\bt_
\ba_
\bb_
\bn_
\ba_
\bm_
\be] [-
\b-l
\bl _
\bt_
\bi_
\bm_
\be | -
\b--
\b-l
\bli
\bif
\bfe
\bet
\bti
\bim
\bme
\be=
\b=_
\bt_
\bi_
\bm_
\be] [-
\b-p
\bp | -
\b--
\b-p
\bpr
\bro
\box
\bxi
\bia
\bab
\bbl
\ble
\be]
10 [-
\b-R
\bR | -
\b--
\b-r
\bre
\ben
\bne
\bew
\bw] [-
\b--
\b-r
\bre
\ben
\bne
\bew
\bwa
\bab
\bbl
\ble
\be] [-
\b-r
\br _
\bt_
\bi_
\bm_
\be | -
\b--
\b-r
\bre
\ben
\bne
\bew
\bwa
\bab
\bbl
\ble
\be-
\b-l
\bli
\bif
\bfe
\be=
\b=_
\bt_
\bi_
\bm_
\be] [-
\b-S
\bS
11 _
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl | -
\b--
\b-s
\bse
\ber
\brv
\bve
\ber
\br=
\b=_
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl] [-
\b-s
\bs _
\bt_
\bi_
\bm_
\be | -
\b--
\b-s
\bst
\bta
\bar
\brt
\bt-
\b-t
\bti
\bim
\bme
\be=
\b=_
\bt_
\bi_
\bm_
\be] [-
\b-k
\bk |
12 -
\b--
\b-u
\bus
\bse
\be-
\b-k
\bke
\bey
\byt
\bta
\bab
\bb] [-
\b-v
\bv | -
\b--
\b-v
\bva
\bal
\bli
\bid
\bda
\bat
\bte
\be] [-
\b-e
\be _
\be_
\bn_
\bc_
\bt_
\by_
\bp_
\be_
\bs | -
\b--
\b-e
\ben
\bnc
\bct
\bty
\byp
\bpe
\bes
\bs=
\b=_
\be_
\bn_
\bc_
\bt_
\by_
\bp_
\be_
\bs]
13 [-
\b-a
\ba _
\ba_
\bd_
\bd_
\br_
\be_
\bs_
\bs_
\be_
\bs | -
\b--
\b-e
\bex
\bxt
\btr
\bra
\ba-
\b-a
\bad
\bdd
\bdr
\bre
\bes
\bss
\bse
\bes
\bs=
\b=_
\ba_
\bd_
\bd_
\br_
\be_
\bs_
\bs_
\be_
\bs]
14 [-
\b--
\b-f
\bfc
\bca
\bac
\bch
\bhe
\be-
\b-v
\bve
\ber
\brs
\bsi
\bio
\bon
\bn=
\b=_
\bi_
\bn_
\bt_
\be_
\bg_
\be_
\br] [-
\b--
\b-n
\bno
\bo-
\b-a
\bad
\bdd
\bdr
\bre
\bes
\bss
\bse
\bes
\bs] [-
\b--
\b-a
\ban
\bno
\bon
\bny
\bym
\bmo
\bou
\bus
\bs]
15 [-
\b--
\b-v
\bve
\ber
\brs
\bsi
\bio
\bon
\bn] [-
\b--
\b-h
\bhe
\bel
\blp
\bp] [_
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl [_
\bc_
\bo_
\bm_
\bm_
\ba_
\bn_
\bd]]
17 D
\bDE
\bES
\bSC
\bCR
\bRI
\bIP
\bPT
\bTI
\bIO
\bON
\bN
18 k
\bki
\bin
\bni
\bit
\bt is used to authenticate to the kerberos server as _
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl, or if
19 none is given, a system generated default (typically your login name at
20 the default realm), and acquire a ticket granting ticket that can later
21 be used to obtain tickets for other services.
23 If you have compiled k
\bki
\bin
\bni
\bit
\bt with Kerberos 4 support and you have a Ker-
24 beros 4 server, k
\bki
\bin
\bni
\bit
\bt will detect this and get you Kerberos 4 tickets.
28 -
\b-c
\bc _
\bc_
\ba_
\bc_
\bh_
\be_
\bn_
\ba_
\bm_
\be -
\b--
\b-c
\bca
\bac
\bch
\bhe
\be=
\b=_
\bc_
\ba_
\bc_
\bh_
\be_
\bn_
\ba_
\bm_
\be
29 The credentials cache to put the acquired ticket in, if other
32 -
\b-f
\bf, -
\b--
\b-f
\bfo
\bor
\brw
\bwa
\bar
\brd
\bda
\bab
\bbl
\ble
\be
33 Get ticket that can be forwarded to another host.
35 -
\b-t
\bt _
\bk_
\be_
\by_
\bt_
\ba_
\bb_
\bn_
\ba_
\bm_
\be, -
\b--
\b-k
\bke
\bey
\byt
\bta
\bab
\bb=
\b=_
\bk_
\be_
\by_
\bt_
\ba_
\bb_
\bn_
\ba_
\bm_
\be
36 Don't ask for a password, but instead get the key from the speci-
39 -
\b-l
\bl _
\bt_
\bi_
\bm_
\be, -
\b--
\b-l
\bli
\bif
\bfe
\bet
\bti
\bim
\bme
\be=
\b=_
\bt_
\bi_
\bm_
\be
40 Specifies the lifetime of the ticket. The argument can either be
41 in seconds, or a more human readable string like `1h'.
43 -
\b-p
\bp, -
\b--
\b-p
\bpr
\bro
\box
\bxi
\bia
\bab
\bbl
\ble
\be
44 Request tickets with the proxiable flag set.
46 -
\b-R
\bR, -
\b--
\b-r
\bre
\ben
\bne
\bew
\bw
47 Try to renew ticket. The ticket must have the `renewable' flag
48 set, and must not be expired.
50 -
\b--
\b-r
\bre
\ben
\bne
\bew
\bwa
\bab
\bbl
\ble
\be
51 The same as -
\b--
\b-r
\bre
\ben
\bne
\bew
\bwa
\bab
\bbl
\ble
\be-
\b-l
\bli
\bif
\bfe
\be, with an infinite time.
53 -
\b-r
\br _
\bt_
\bi_
\bm_
\be, -
\b--
\b-r
\bre
\ben
\bne
\bew
\bwa
\bab
\bbl
\ble
\be-
\b-l
\bli
\bif
\bfe
\be=
\b=_
\bt_
\bi_
\bm_
\be
54 The max renewable ticket life.
56 -
\b-S
\bS _
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl, -
\b--
\b-s
\bse
\ber
\brv
\bve
\ber
\br=
\b=_
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl
57 Get a ticket for a service other than krbtgt/LOCAL.REALM.
59 -
\b-s
\bs _
\bt_
\bi_
\bm_
\be, -
\b--
\b-s
\bst
\bta
\bar
\brt
\bt-
\b-t
\bti
\bim
\bme
\be=
\b=_
\bt_
\bi_
\bm_
\be
60 Obtain a ticket that starts to be valid _
\bt_
\bi_
\bm_
\be (which can really be
61 a generic time specification, like `1h') seconds into the future.
63 -
\b-k
\bk, -
\b--
\b-u
\bus
\bse
\be-
\b-k
\bke
\bey
\byt
\bta
\bab
\bb
64 The same as -
\b--
\b-k
\bke
\bey
\byt
\bta
\bab
\bb, but with the default keytab name (normally
65 _
\bF_
\bI_
\bL_
\bE_
\b:_
\b/_
\be_
\bt_
\bc_
\b/_
\bk_
\br_
\bb_
\b5_
\b._
\bk_
\be_
\by_
\bt_
\ba_
\bb).
67 -
\b-v
\bv, -
\b--
\b-v
\bva
\bal
\bli
\bid
\bda
\bat
\bte
\be
68 Try to validate an invalid ticket.
70 -
\b-e
\be, -
\b--
\b-e
\ben
\bnc
\bct
\bty
\byp
\bpe
\bes
\bs=
\b=_
\be_
\bn_
\bc_
\bt_
\by_
\bp_
\be_
\bs
71 Request tickets with this particular enctype.
73 -
\b--
\b-f
\bfc
\bca
\bac
\bch
\bhe
\be-
\b-v
\bve
\ber
\brs
\bsi
\bio
\bon
\bn=
\b=_
\bv_
\be_
\br_
\bs_
\bi_
\bo_
\bn
74 Create a credentials cache of version v
\bve
\ber
\brs
\bsi
\bio
\bon
\bn.
76 -
\b-a
\ba, -
\b--
\b-e
\bex
\bxt
\btr
\bra
\ba-
\b-a
\bad
\bdd
\bdr
\bre
\bes
\bss
\bse
\bes
\bs=
\b=_
\be_
\bn_
\bc_
\bt_
\by_
\bp_
\be_
\bs
77 Adds a set of addresses that will, in addition to the systems lo-
78 cal addresses, be put in the ticket. This can be useful if all
79 addresses a client can use can't be automatically figured out.
80 One such example is if the client is behind a firewall. Also set-
81 table via libdefaults/extra_addresses in krb5.conf(5).
83 -
\b--
\b-n
\bno
\bo-
\b-a
\bad
\bdd
\bdr
\bre
\bes
\bss
\bse
\bes
\bs
84 Request a ticket with no addresses.
86 -
\b--
\b-a
\ban
\bno
\bon
\bny
\bym
\bmo
\bou
\bus
\bs
87 Request an anonymous ticket (which means that the ticket will be
88 issued to an anonymous principal, typically ``anonymous@REALM'').
90 The following options are only available if k
\bki
\bin
\bni
\bit
\bt has been compiled with
91 support for Kerberos 4.
93 -
\b-4
\b4, -
\b--
\b-5
\b52
\b24
\b4i
\bin
\bni
\bit
\bt
94 Try to convert the obtained Kerberos 5 krbtgt to a version 4 com-
95 patible ticket. It will store this ticket in the default Kerberos
98 -
\b-9
\b9, -
\b--
\b-5
\b52
\b24
\b4c
\bco
\bon
\bnv
\bve
\ber
\brt
\bt
99 only convert ticket to version 4
101 -
\b--
\b-a
\baf
\bfs
\bsl
\blo
\bog
\bg
102 Gets AFS tickets, converts them to version 4 format, and stores
103 them in the kernel. Only useful if you have AFS.
105 The _
\bf_
\bo_
\br_
\bw_
\ba_
\br_
\bd_
\ba_
\bb_
\bl_
\be, _
\bp_
\br_
\bo_
\bx_
\bi_
\ba_
\bb_
\bl_
\be, _
\bt_
\bi_
\bc_
\bk_
\be_
\bt_
\b__
\bl_
\bi_
\bf_
\be, and _
\br_
\be_
\bn_
\be_
\bw_
\ba_
\bb_
\bl_
\be_
\b__
\bl_
\bi_
\bf_
\be options can
106 be set to a default value from the appdefaults section in krb5.conf, see
109 If a _
\bc_
\bo_
\bm_
\bm_
\ba_
\bn_
\bd is given, k
\bki
\bin
\bni
\bit
\bt will setup new credentials caches, and AFS
110 PAG, and then run the given command. When it finishes the credentials
113 E
\bEN
\bNV
\bVI
\bIR
\bRO
\bON
\bNM
\bME
\bEN
\bNT
\bT
115 Specifies the default credentials cache.
118 The file name of _
\bk_
\br_
\bb_
\b5_
\b._
\bc_
\bo_
\bn_
\bf , the default being _
\b/_
\be_
\bt_
\bc_
\b/_
\bk_
\br_
\bb_
\b5_
\b._
\bc_
\bo_
\bn_
\bf.
121 Specifies the Kerberos 4 ticket file to store version 4 tickets
124 S
\bSE
\bEE
\bE A
\bAL
\bLS
\bSO
\bO
125 kdestroy(1), klist(1), krb5_appdefault(3), krb5.conf(5)
127 HEIMDAL May 29, 1998 2