User Commands klist(1)
NAME
klist - list currently held Kerberos tickets
SYNOPSIS
/usr/bin/klist [-e]
[ [-c] [-f] [-s] [-a [-n] [cachename]
[-k [-t] [-K] [keytabfile]
DESCRIPTION
The klist utility prints the name of the credentials cache,
the identity of the principal that the tickets are for (as
listed in the ticket file), and the principal names of all
Kerberos tickets currently held by the user, along with the
issue and expiration time for each authenticator. Principal
names are listed in the form name/instance@realm, with the
'/' omitted if the instance is not included, and the '@'
omitted if the realm is not included.
If cachefile or keytabname is not specified, klist
displays the credentials in the default credentials cache or
keytab files as appropriate. By default, your ticket is
stored in the file /tmp/krb5ccuid, where uid is the current
user-ID of the user.
OPTIONS
The following options are supported:
-a Displays list of addresses in creden-
tials. Uses the configured nameservice
to translate numeric network addresses
to the associated hostname if possible.
-c [cachename] Lists tickets held in a credentials
cache. This is the default if neither -c
nor -k is specified.
-e Displays the encryption types of the
session key and the ticket for each
credential in the credential cache, or
each key in the keytab file.
-f Shows the flags present in the creden-
tials, using the following abbrevia-
tions:
a Anonymous
SunOS 5.11 Last change: 16 Nov 2006 1
User Commands klist(1)
A Pre-authenticated
d Post-dated
D Post-dateable
f Forwarded
F Forwardable
H Hardware authenticated
i Invalid
I Initial
O Okay as delegate
p Proxy
P Proxiable
R Renewable
T Transit policy checked
-k [keytabfile] List keys held in a keytab file.
-K Displays the value of the encryption key
in each keytab entry in the keytab file.
-n Shows numeric IP addresses instead of
reverse-resolving addresses. Only valid
with -a option.
SunOS 5.11 Last change: 16 Nov 2006 2
User Commands klist(1)
-s Causes klist to run silently (produce no
output), but to still set the exit
status according to whether it finds the
credentials cache. The exit status is 0
if klist finds a credentials cache, and
`1if it does not, or if the local-realm
TGT has expired.
-t Displays the time entry timestamps for
each keytab entry in the keytab file.
ENVIRONMENT VARIABLES
klist uses the following environment variable:
KRB5CNAME Location of the credentials (ticket) cache.
See krb5envvar(5) for syntax and details.
FILES
/tmp/krb5ccuid Default credentials cache (uid is
the decimal UID of the user).
/etc/krb5/krb5.keytab Default location for the local
host's keytab file.
/etc/krb5/krb5.conf Default location for the local
host's configuration file. See
krb5.conf(4).
ATRIBUTES
See attributes(5) for descriptions of the following attri-
butes:
ATRIBUTE TYPE ATRIBUTE VALUE
Availability SUNWkrbu
Interface Stability See below.
The command arguments are Evolving. The command output is
Unstable.
SunOS 5.11 Last change: 16 Nov 2006 3
User Commands klist(1)
SEE ALSO
kdestroy(1), kinit(1), krb5.conf(4), attributes(5),
krb5envvar(5), kerberos(5)
BUGS
When reading a file as a service key file, very little error
checking is performed.
SunOS 5.11 Last change: 16 Nov 2006 4
|
