2 KINIT(1) UNIX Reference Manual KINIT(1)
5 k
\bki
\bin
\bni
\bit
\bt k
\bka
\bau
\but
\bth
\bh - acquire initial tickets
7 S
\bSY
\bYN
\bNO
\bOP
\bPS
\bSI
\bIS
\bS
8 k
\bki
\bin
\bni
\bit
\bt [-
\b-4
\b4 | -
\b--
\b-5
\b52
\b24
\b4i
\bin
\bni
\bit
\bt] [-
\b-9
\b9 | -
\b--
\b-5
\b52
\b24
\b4c
\bco
\bon
\bnv
\bve
\ber
\brt
\bt] [-
\b--
\b-a
\baf
\bfs
\bsl
\blo
\bog
\bg] [-
\b-c
\bc _
\bc_
\ba_
\bc_
\bh_
\be_
\bn_
\ba_
\bm_
\be |
9 -
\b--
\b-c
\bca
\bac
\bch
\bhe
\be=
\b=_
\bc_
\ba_
\bc_
\bh_
\be_
\bn_
\ba_
\bm_
\be] [-
\b-f
\bf | -
\b--
\b-f
\bfo
\bor
\brw
\bwa
\bar
\brd
\bda
\bab
\bbl
\ble
\be] [-
\b-t
\bt _
\bk_
\be_
\by_
\bt_
\ba_
\bb_
\bn_
\ba_
\bm_
\be |
10 -
\b--
\b-k
\bke
\bey
\byt
\bta
\bab
\bb=
\b=_
\bk_
\be_
\by_
\bt_
\ba_
\bb_
\bn_
\ba_
\bm_
\be] [-
\b-l
\bl _
\bt_
\bi_
\bm_
\be | -
\b--
\b-l
\bli
\bif
\bfe
\bet
\bti
\bim
\bme
\be=
\b=_
\bt_
\bi_
\bm_
\be] [-
\b-p
\bp | -
\b--
\b-p
\bpr
\bro
\box
\bxi
\bia
\bab
\bbl
\ble
\be]
11 [-
\b-R
\bR | -
\b--
\b-r
\bre
\ben
\bne
\bew
\bw] [-
\b--
\b-r
\bre
\ben
\bne
\bew
\bwa
\bab
\bbl
\ble
\be] [-
\b-r
\br _
\bt_
\bi_
\bm_
\be | -
\b--
\b-r
\bre
\ben
\bne
\bew
\bwa
\bab
\bbl
\ble
\be-
\b-l
\bli
\bif
\bfe
\be=
\b=_
\bt_
\bi_
\bm_
\be] [-
\b-S
\bS
12 _
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl | -
\b--
\b-s
\bse
\ber
\brv
\bve
\ber
\br=
\b=_
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl] [-
\b-s
\bs _
\bt_
\bi_
\bm_
\be | -
\b--
\b-s
\bst
\bta
\bar
\brt
\bt-
\b-t
\bti
\bim
\bme
\be=
\b=_
\bt_
\bi_
\bm_
\be] [-
\b-k
\bk |
13 -
\b--
\b-u
\bus
\bse
\be-
\b-k
\bke
\bey
\byt
\bta
\bab
\bb] [-
\b-v
\bv | -
\b--
\b-v
\bva
\bal
\bli
\bid
\bda
\bat
\bte
\be] [-
\b-e
\be _
\be_
\bn_
\bc_
\bt_
\by_
\bp_
\be_
\bs | -
\b--
\b-e
\ben
\bnc
\bct
\bty
\byp
\bpe
\bes
\bs=
\b=_
\be_
\bn_
\bc_
\bt_
\by_
\bp_
\be_
\bs]
14 [-
\b-a
\ba _
\ba_
\bd_
\bd_
\br_
\be_
\bs_
\bs_
\be_
\bs | -
\b--
\b-e
\bex
\bxt
\btr
\bra
\ba-
\b-a
\bad
\bdd
\bdr
\bre
\bes
\bss
\bse
\bes
\bs=
\b=_
\ba_
\bd_
\bd_
\br_
\be_
\bs_
\bs_
\be_
\bs]
15 [-
\b--
\b-f
\bfc
\bca
\bac
\bch
\bhe
\be-
\b-v
\bve
\ber
\brs
\bsi
\bio
\bon
\bn=
\b=_
\bi_
\bn_
\bt_
\be_
\bg_
\be_
\br] [-
\b--
\b-n
\bno
\bo-
\b-a
\bad
\bdd
\bdr
\bre
\bes
\bss
\bse
\bes
\bs] [-
\b--
\b-a
\ban
\bno
\bon
\bny
\bym
\bmo
\bou
\bus
\bs]
16 [-
\b--
\b-v
\bve
\ber
\brs
\bsi
\bio
\bon
\bn] [-
\b--
\b-h
\bhe
\bel
\blp
\bp] [_
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl [_
\bc_
\bo_
\bm_
\bm_
\ba_
\bn_
\bd]]
18 D
\bDE
\bES
\bSC
\bCR
\bRI
\bIP
\bPT
\bTI
\bIO
\bON
\bN
19 k
\bki
\bin
\bni
\bit
\bt is used to authenticate to the Kerberos server as _
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl, or if
20 none is given, a system generated default (typically your login name at
21 the default realm), and acquire a ticket granting ticket that can later
22 be used to obtain tickets for other services.
24 If you have compiled k
\bki
\bin
\bni
\bit
\bt with Kerberos 4 support and you have a Ker-
25 beros 4 server, k
\bki
\bin
\bni
\bit
\bt will detect this and get you Kerberos 4 tickets.
29 -
\b-c
\bc _
\bc_
\ba_
\bc_
\bh_
\be_
\bn_
\ba_
\bm_
\be -
\b--
\b-c
\bca
\bac
\bch
\bhe
\be=
\b=_
\bc_
\ba_
\bc_
\bh_
\be_
\bn_
\ba_
\bm_
\be
30 The credentials cache to put the acquired ticket in, if other
33 -
\b-f
\bf, -
\b--
\b-f
\bfo
\bor
\brw
\bwa
\bar
\brd
\bda
\bab
\bbl
\ble
\be
34 Get ticket that can be forwarded to another host.
36 -
\b-t
\bt _
\bk_
\be_
\by_
\bt_
\ba_
\bb_
\bn_
\ba_
\bm_
\be, -
\b--
\b-k
\bke
\bey
\byt
\bta
\bab
\bb=
\b=_
\bk_
\be_
\by_
\bt_
\ba_
\bb_
\bn_
\ba_
\bm_
\be
37 Don't ask for a password, but instead get the key from the speci-
40 -
\b-l
\bl _
\bt_
\bi_
\bm_
\be, -
\b--
\b-l
\bli
\bif
\bfe
\bet
\bti
\bim
\bme
\be=
\b=_
\bt_
\bi_
\bm_
\be
41 Specifies the lifetime of the ticket. The argument can either be
42 in seconds, or a more human readable string like `1h'.
44 -
\b-p
\bp, -
\b--
\b-p
\bpr
\bro
\box
\bxi
\bia
\bab
\bbl
\ble
\be
45 Request tickets with the proxiable flag set.
47 -
\b-R
\bR, -
\b--
\b-r
\bre
\ben
\bne
\bew
\bw
48 Try to renew ticket. The ticket must have the `renewable' flag
49 set, and must not be expired.
51 -
\b--
\b-r
\bre
\ben
\bne
\bew
\bwa
\bab
\bbl
\ble
\be
52 The same as -
\b--
\b-r
\bre
\ben
\bne
\bew
\bwa
\bab
\bbl
\ble
\be-
\b-l
\bli
\bif
\bfe
\be, with an infinite time.
54 -
\b-r
\br _
\bt_
\bi_
\bm_
\be, -
\b--
\b-r
\bre
\ben
\bne
\bew
\bwa
\bab
\bbl
\ble
\be-
\b-l
\bli
\bif
\bfe
\be=
\b=_
\bt_
\bi_
\bm_
\be
55 The max renewable ticket life.
57 -
\b-S
\bS _
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl, -
\b--
\b-s
\bse
\ber
\brv
\bve
\ber
\br=
\b=_
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl
58 Get a ticket for a service other than krbtgt/LOCAL.REALM.
60 -
\b-s
\bs _
\bt_
\bi_
\bm_
\be, -
\b--
\b-s
\bst
\bta
\bar
\brt
\bt-
\b-t
\bti
\bim
\bme
\be=
\b=_
\bt_
\bi_
\bm_
\be
61 Obtain a ticket that starts to be valid _
\bt_
\bi_
\bm_
\be (which can really be
62 a generic time specification, like `1h') seconds into the future.
64 -
\b-k
\bk, -
\b--
\b-u
\bus
\bse
\be-
\b-k
\bke
\bey
\byt
\bta
\bab
\bb
65 The same as -
\b--
\b-k
\bke
\bey
\byt
\bta
\bab
\bb, but with the default keytab name (normally
67 _
\bF_
\bI_
\bL_
\bE_
\b:_
\b/_
\be_
\bt_
\bc_
\b/_
\bk_
\br_
\bb_
\b5_
\b._
\bk_
\be_
\by_
\bt_
\ba_
\bb).
69 -
\b-v
\bv, -
\b--
\b-v
\bva
\bal
\bli
\bid
\bda
\bat
\bte
\be
70 Try to validate an invalid ticket.
72 -
\b-e
\be, -
\b--
\b-e
\ben
\bnc
\bct
\bty
\byp
\bpe
\bes
\bs=
\b=_
\be_
\bn_
\bc_
\bt_
\by_
\bp_
\be_
\bs
73 Request tickets with this particular enctype.
75 -
\b--
\b-f
\bfc
\bca
\bac
\bch
\bhe
\be-
\b-v
\bve
\ber
\brs
\bsi
\bio
\bon
\bn=
\b=_
\bv_
\be_
\br_
\bs_
\bi_
\bo_
\bn
76 Create a credentials cache of version v
\bve
\ber
\brs
\bsi
\bio
\bon
\bn.
78 -
\b-a
\ba, -
\b--
\b-e
\bex
\bxt
\btr
\bra
\ba-
\b-a
\bad
\bdd
\bdr
\bre
\bes
\bss
\bse
\bes
\bs=
\b=_
\be_
\bn_
\bc_
\bt_
\by_
\bp_
\be_
\bs
79 Adds a set of addresses that will, in addition to the systems lo-
80 cal addresses, be put in the ticket. This can be useful if all
81 addresses a client can use can't be automatically figured out.
82 One such example is if the client is behind a firewall. Also set-
83 table via libdefaults/extra_addresses in krb5.conf(5).
85 -
\b--
\b-n
\bno
\bo-
\b-a
\bad
\bdd
\bdr
\bre
\bes
\bss
\bse
\bes
\bs
86 Request a ticket with no addresses.
88 -
\b--
\b-a
\ban
\bno
\bon
\bny
\bym
\bmo
\bou
\bus
\bs
89 Request an anonymous ticket (which means that the ticket will be
90 issued to an anonymous principal, typically ``anonymous@REALM'').
92 The following options are only available if k
\bki
\bin
\bni
\bit
\bt has been compiled with
93 support for Kerberos 4.
95 -
\b-4
\b4, -
\b--
\b-5
\b52
\b24
\b4i
\bin
\bni
\bit
\bt
96 Try to convert the obtained Kerberos 5 krbtgt to a version 4 com-
97 patible ticket. It will store this ticket in the default Kerberos
100 -
\b-9
\b9, -
\b--
\b-5
\b52
\b24
\b4c
\bco
\bon
\bnv
\bve
\ber
\brt
\bt
101 only convert ticket to version 4
103 -
\b--
\b-a
\baf
\bfs
\bsl
\blo
\bog
\bg
104 Gets AFS tickets, converts them to version 4 format, and stores
105 them in the kernel. Only useful if you have AFS.
107 The _
\bf_
\bo_
\br_
\bw_
\ba_
\br_
\bd_
\ba_
\bb_
\bl_
\be, _
\bp_
\br_
\bo_
\bx_
\bi_
\ba_
\bb_
\bl_
\be, _
\bt_
\bi_
\bc_
\bk_
\be_
\bt_
\b__
\bl_
\bi_
\bf_
\be, and _
\br_
\be_
\bn_
\be_
\bw_
\ba_
\bb_
\bl_
\be_
\b__
\bl_
\bi_
\bf_
\be options can
108 be set to a default value from the appdefaults section in krb5.conf, see
111 If a _
\bc_
\bo_
\bm_
\bm_
\ba_
\bn_
\bd is given, k
\bki
\bin
\bni
\bit
\bt will setup new credentials caches, and AFS
112 PAG, and then run the given command. When it finishes the credentials
115 E
\bEN
\bNV
\bVI
\bIR
\bRO
\bON
\bNM
\bME
\bEN
\bNT
\bT
117 Specifies the default credentials cache.
120 The file name of _
\bk_
\br_
\bb_
\b5_
\b._
\bc_
\bo_
\bn_
\bf , the default being _
\b/_
\be_
\bt_
\bc_
\b/_
\bk_
\br_
\bb_
\b5_
\b._
\bc_
\bo_
\bn_
\bf.
123 Specifies the Kerberos 4 ticket file to store version 4 tickets
126 S
\bSE
\bEE
\bE A
\bAL
\bLS
\bSO
\bO
127 kdestroy(1), klist(1), krb5_appdefault(3), krb5.conf(5)
129 HEIMDAL May 29, 1998 2