2001-06-21 02:12:07 +00:00
|
|
|
.\" $Id: klist.1,v 1.8 2001/06/08 21:35:32 joda Exp $
|
2000-01-09 20:58:00 +00:00
|
|
|
.\"
|
2001-02-13 16:46:19 +00:00
|
|
|
.Dd July 8, 2000
|
2000-01-09 20:58:00 +00:00
|
|
|
.Dt KLIST 1
|
|
|
|
.Os HEIMDAL
|
|
|
|
.Sh NAME
|
|
|
|
.Nm klist
|
2001-05-08 14:57:13 +00:00
|
|
|
.Nd list Kerberos credentials
|
2000-01-09 20:58:00 +00:00
|
|
|
.Sh SYNOPSIS
|
|
|
|
.Nm
|
2001-02-13 16:46:19 +00:00
|
|
|
.Oo Fl c Ar cache \*(Ba Xo
|
2001-06-21 02:12:07 +00:00
|
|
|
.Fl -cache= Ns Ar cache
|
2001-02-13 16:46:19 +00:00
|
|
|
.Xc
|
2001-06-21 02:12:07 +00:00
|
|
|
.Oc
|
2001-02-13 16:46:19 +00:00
|
|
|
.Op Fl s | Fl t | Fl -test
|
|
|
|
.Op Fl 4 | Fl -v4
|
|
|
|
.Op Fl T | Fl -tokens
|
|
|
|
.Op Fl 5 | Fl -v5
|
2000-01-09 20:58:00 +00:00
|
|
|
.Op Fl v | Fl -verbose
|
2001-02-13 16:46:19 +00:00
|
|
|
.Op Fl f
|
2000-01-09 20:58:00 +00:00
|
|
|
.Op Fl -version
|
|
|
|
.Op Fl -help
|
|
|
|
.Sh DESCRIPTION
|
|
|
|
.Nm
|
|
|
|
reads and displays the current tickets in the crential cache (also
|
2001-02-13 16:46:19 +00:00
|
|
|
known as the ticket file).
|
2000-01-09 20:58:00 +00:00
|
|
|
.Pp
|
|
|
|
Options supported:
|
|
|
|
.Bl -tag -width Ds
|
|
|
|
.It Xo
|
2001-02-13 16:46:19 +00:00
|
|
|
.Fl c Ar cache Ns ,
|
|
|
|
.Fl -cache= Ns Ar cache
|
|
|
|
.Xc
|
|
|
|
credentials cache to list
|
|
|
|
.It Xo
|
|
|
|
.Fl s Ns ,
|
2000-01-09 20:58:00 +00:00
|
|
|
.Fl t Ns ,
|
|
|
|
.Fl -test
|
|
|
|
.Xc
|
|
|
|
Test for there being an active and valid TGT for the local realm of
|
|
|
|
the user in the credential cache.
|
|
|
|
.It Xo
|
2001-02-13 16:46:19 +00:00
|
|
|
.Fl 4 Ns ,
|
|
|
|
.Fl -v4
|
|
|
|
.Xc
|
|
|
|
display v4 tickets
|
|
|
|
.It Xo
|
|
|
|
.Fl T Ns ,
|
|
|
|
.Fl -tokens
|
|
|
|
.Xc
|
|
|
|
display AFS tokens
|
|
|
|
.It Xo
|
|
|
|
.Fl 5 Ns ,
|
|
|
|
.Fl -v5
|
|
|
|
.Xc
|
|
|
|
display v5 cred cache (this is the default)
|
|
|
|
.It Fl f
|
|
|
|
Include ticket flags in short form, each charcted stands for a
|
|
|
|
specific flag, as follows:
|
|
|
|
.Bl -tag -width XXX -compact -offset indent
|
|
|
|
.It F
|
|
|
|
forwardable
|
|
|
|
.It f
|
|
|
|
forwarded
|
|
|
|
.It P
|
|
|
|
proxiable
|
|
|
|
.It p
|
|
|
|
proxied
|
|
|
|
.It D
|
|
|
|
postdate-able
|
|
|
|
.It d
|
|
|
|
postdated
|
|
|
|
.It R
|
|
|
|
renewable
|
|
|
|
.It I
|
|
|
|
initial
|
|
|
|
.It i
|
|
|
|
invalid
|
|
|
|
.It A
|
|
|
|
pre-authenticated
|
|
|
|
.It H
|
|
|
|
hardware authenticated
|
|
|
|
.El
|
2001-05-08 14:57:13 +00:00
|
|
|
.Pp
|
2001-02-13 16:46:19 +00:00
|
|
|
This information is also output with the
|
|
|
|
.Fl -verbose
|
|
|
|
option, but in a more verbose way.
|
|
|
|
.It Xo
|
2000-01-09 20:58:00 +00:00
|
|
|
.Fl v Ns ,
|
|
|
|
.Fl -verbose
|
|
|
|
.Xc
|
2001-02-13 16:46:19 +00:00
|
|
|
Verbose output. Include all possible information:
|
|
|
|
.Bl -tag -width XXXX -offset indent
|
|
|
|
.It Server
|
|
|
|
the princial the ticket is for
|
|
|
|
.It Ticket etype
|
|
|
|
the encryption type use in the ticket, followed by the key version of
|
|
|
|
the ticket, if it is available
|
|
|
|
.It Session key
|
|
|
|
the encryption type of the session key, if it's different from the
|
|
|
|
encryption type of the ticket
|
|
|
|
.It Auth time
|
|
|
|
the time the authentication exchange took place
|
|
|
|
.It Start time
|
|
|
|
the time that this tickets is valid from (only printed if it's
|
|
|
|
different from the auth time)
|
|
|
|
.It End time
|
|
|
|
when the ticket expires, if it has already expired this is also noted
|
|
|
|
.It Renew till
|
|
|
|
the maximum possible end time of any ticket derived from this one
|
|
|
|
.It Ticket flags
|
|
|
|
the flags set on the ticket
|
|
|
|
.It Addresses
|
|
|
|
the set of addresses from which this ticket is valid
|
|
|
|
.El
|
2000-01-09 20:58:00 +00:00
|
|
|
.El
|
|
|
|
.Sh SEE ALSO
|
|
|
|
.Xr kinit 1 ,
|
|
|
|
.Xr kdestroy 1
|