1.\" Copyright (c) 2002 - 2007 Kungliga Tekniska Högskolan 2.\" (Royal Institute of Technology, Stockholm, Sweden). 3.\" All rights reserved. 4.\" 5.\" Redistribution and use in source and binary forms, with or without 6.\" modification, are permitted provided that the following conditions 7.\" are met: 8.\" 9.\" 1. Redistributions of source code must retain the above copyright 10.\" notice, this list of conditions and the following disclaimer. 11.\" 12.\" 2. Redistributions in binary form must reproduce the above copyright 13.\" notice, this list of conditions and the following disclaimer in the 14.\" documentation and/or other materials provided with the distribution. 15.\" 16.\" 3. Neither the name of the Institute nor the names of its contributors 17.\" may be used to endorse or promote products derived from this software 18.\" without specific prior written permission. 19.\" 20.\" THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 21.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 22.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 23.\" ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 24.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 25.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 26.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 27.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 28.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 29.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 30.\" SUCH DAMAGE. 31.\" 32.\" $Id$ 33.\" 34.Dd September 18, 2006 35.Dt KIMPERSONATE 8 36.Os Heimdal 37.Sh NAME 38.Nm kimpersonate 39.Nd impersonate a user when there exist a srvtab, keyfile or KeyFile 40.Sh SYNOPSIS 41.Nm 42.Op Fl s Ar string \*(Ba Fl Fl server= Ns Ar string 43.Op Fl c Ar string \*(Ba Fl Fl client= Ns Ar string 44.Op Fl k Ar string \*(Ba Fl Fl keytab= Ns Ar string 45.Op Fl 5 | Fl Fl krb5 46.Op Fl e Ar integer \*(Ba Fl Fl expire-time= Ns Ar integer 47.Op Fl a Ar string \*(Ba Fl Fl client-address= Ns Ar string 48.Op Fl t Ar string \*(Ba Fl Fl enc-type= Ns Ar string 49.Op Fl f Ar string \*(Ba Fl Fl ticket-flags= Ns Ar string 50.Op Fl Fl verbose 51.Op Fl Fl version 52.Op Fl Fl help 53.Sh DESCRIPTION 54The 55.Nm 56program creates a "fake" ticket using the service-key of the service. 57The service key can be read from a Kerberos 5 keytab, AFS KeyFile or 58(if compiled with support for Kerberos 4) a Kerberos 4 srvtab. 59Supported options: 60.Bl -tag -width Ds 61.It Fl s Ar string Ns , Fl Fl server= Ns Ar string 62name of server principal 63.It Fl c Ar string Ns , Fl Fl client= Ns Ar string 64name of client principal 65.It Fl k Ar string Ns , Fl Fl keytab= Ns Ar string 66name of keytab file 67.It Fl 5 Ns , Fl Fl krb5 68create a Kerberos 5 ticket 69.It Fl e Ar integer Ns , Fl Fl expire-time= Ns Ar integer 70lifetime of ticket in seconds 71.It Fl a Ar string Ns , Fl Fl client-address= Ns Ar string 72address of client 73.It Fl t Ar string Ns , Fl Fl enc-type= Ns Ar string 74encryption type 75.It Fl f Ar string Ns , Fl Fl ticket-flags= Ns Ar string 76ticket flags for krb5 ticket 77.It Fl Fl verbose 78Verbose output 79.It Fl Fl version 80Print version 81.It Fl Fl help 82.El 83.Sh FILES 84Uses 85.Pa /etc/krb5.keytab, 86.Pa /etc/srvtab 87and 88.Pa /usr/afs/etc/KeyFile 89when available and the 90.Fl k 91option is used with an appropriate prefix. 92.Sh EXAMPLES 93.Nm 94can be used in 95.Nm samba 96root preexec option 97or for debugging. 98.Nm 99-s host/hummel.e.kth.se@E.KTH.SE -c lha@E.KTH.SE -5 100will create a Kerberos 5 ticket for lha@E.KTH.SE for the host 101hummel.e.kth.se if there exists a keytab entry for it in 102.Pa /etc/krb5.keytab . 103.Sh SEE ALSO 104.Xr kinit 1 , 105.Xr klist 1 106.Sh AUTHORS 107Love Hornquist Astrand <lha@kth.se> 108