15e9cd1aeSAssar Westerlund.\" $Id: kinit.1,v 1.8 2001/01/28 21:44:56 assar Exp $ 2b528cefcSMark Murray.\" 3b528cefcSMark Murray.Dd May 29, 1998 413e3f4d6SMark Murray.Dt KINIT 1 5b528cefcSMark Murray.Os HEIMDAL 6b528cefcSMark Murray.Sh NAME 713e3f4d6SMark Murray.Nm kinit , 8b528cefcSMark Murray.Nm kauth 945524cd7SAssar Westerlund.Nd acquire initial tickets 10b528cefcSMark Murray.Sh SYNOPSIS 1113e3f4d6SMark Murray.Nm kinit 125e9cd1aeSAssar Westerlund.Op Fl 4 | Fl -524init 13b528cefcSMark Murray.Op Fl -afslog 145e9cd1aeSAssar Westerlund.Oo Fl c Ar cachename \*(Ba Xo 155e9cd1aeSAssar Westerlund.Fl -cache= Ns Ar cachename Oc 165e9cd1aeSAssar Westerlund.Xc 175e9cd1aeSAssar Westerlund.Op Fl f | Fl -forwardable 185e9cd1aeSAssar Westerlund.Oo Fl t Ar keytabname \*(Ba Xo 195e9cd1aeSAssar Westerlund.Fl -keytab= Ns Ar keytabname Oc 205e9cd1aeSAssar Westerlund.Xc 215e9cd1aeSAssar Westerlund.Oo Fl l Ar time \*(Ba Xo 225e9cd1aeSAssar Westerlund.Fl -lifetime= Ns Ar time Oc 235e9cd1aeSAssar Westerlund.Xc 245e9cd1aeSAssar Westerlund.Op Fl p | Fl -proxiable 255e9cd1aeSAssar Westerlund.Op Fl R | Fl -renew 26b528cefcSMark Murray.Op Fl -renewable 275e9cd1aeSAssar Westerlund.Oo Fl r Ar time \*(Ba Xo 285e9cd1aeSAssar Westerlund.Fl -renewable-life= Ns Ar time Oc 295e9cd1aeSAssar Westerlund.Xc 305e9cd1aeSAssar Westerlund.Oo Fl S Ar principal \*(Ba Xo 315e9cd1aeSAssar Westerlund.Fl -server= Ns Ar principal Oc 325e9cd1aeSAssar Westerlund.Xc 335e9cd1aeSAssar Westerlund.Oo Fl s Ar time \*(Ba Xo 345e9cd1aeSAssar Westerlund.Fl -start-time= Ns Ar time Oc 355e9cd1aeSAssar Westerlund.Xc 365e9cd1aeSAssar Westerlund.Op Fl k | Fl -use-keytab 375e9cd1aeSAssar Westerlund.Op Fl v | Fl -validate 385e9cd1aeSAssar Westerlund.Oo Fl e Ar enctype \*(Ba Xo 395e9cd1aeSAssar Westerlund.Fl -enctypes= Ns Ar enctype Oc 405e9cd1aeSAssar Westerlund.Xc 415e9cd1aeSAssar Westerlund.Op Fl -fcache-version= Ns Ar integer 4213e3f4d6SMark Murray.Op Fl -no-addresses 435e9cd1aeSAssar Westerlund.Op Fl -anonymous 44b528cefcSMark Murray.Op Fl -version 45b528cefcSMark Murray.Op Fl -help 46b528cefcSMark Murray.Op Ar principal 47b528cefcSMark Murray.Sh DESCRIPTION 48b528cefcSMark Murray.Nm 49b528cefcSMark Murrayis used to authenticate to the kerberos server as 50b528cefcSMark Murray.Ar principal , 515e9cd1aeSAssar Westerlundor if none is given, a system generated default (typically your login 525e9cd1aeSAssar Westerlundname at the default realm), and acquire a ticket granting ticket that 535e9cd1aeSAssar Westerlundcan later be used to obtain tickets for other services. 545e9cd1aeSAssar Westerlund.Pp 555e9cd1aeSAssar WesterlundIf you have compiled kinit with Kerberos 4 support and you have a 565e9cd1aeSAssar WesterlundKerberos 4 server, 575e9cd1aeSAssar Westerlund.Nm 585e9cd1aeSAssar Westerlundwill detect this and get you Kerberos 4 tickets. 595e9cd1aeSAssar Westerlund.Pp 60b528cefcSMark MurraySupported options: 61b528cefcSMark Murray.Bl -tag -width Ds 62b528cefcSMark Murray.It Xo 63b528cefcSMark Murray.Fl c Ar cachename 64b528cefcSMark Murray.Fl -cache= Ns Ar cachename 65b528cefcSMark Murray.Xc 66b528cefcSMark MurrayThe credentials cache to put the acquired ticket in, if other than 67b528cefcSMark Murraydefault. 68b528cefcSMark Murray.It Xo 69b528cefcSMark Murray.Fl f Ns , 70b528cefcSMark Murray.Fl -forwardable 71b528cefcSMark Murray.Xc 72b528cefcSMark MurrayGet ticket that can be forwarded to another host. 73b528cefcSMark Murray.It Xo 74b528cefcSMark Murray.Fl t Ar keytabname Ns , 75b528cefcSMark Murray.Fl -keytab= Ns Ar keytabname 76b528cefcSMark Murray.Xc 77b528cefcSMark MurrayDon't ask for a password, but instead get the key from the specified 78b528cefcSMark Murraykeytab. 79b528cefcSMark Murray.It Xo 805e9cd1aeSAssar Westerlund.Fl l Ar time Ns , 815e9cd1aeSAssar Westerlund.Fl -lifetime= Ns Ar time 82b528cefcSMark Murray.Xc 835e9cd1aeSAssar WesterlundSpecifies the lifetime of the ticket. The argument can either be in 845e9cd1aeSAssar Westerlundseconds, or a more human readable string like 855e9cd1aeSAssar Westerlund.Sq 1h . 86b528cefcSMark Murray.It Xo 87b528cefcSMark Murray.Fl p Ns , 88b528cefcSMark Murray.Fl -proxiable 89b528cefcSMark Murray.Xc 90b528cefcSMark MurrayRequest tickets with the proxiable flag set. 91b528cefcSMark Murray.It Xo 92b528cefcSMark Murray.Fl R Ns , 93b528cefcSMark Murray.Fl -renew 94b528cefcSMark Murray.Xc 95b528cefcSMark MurrayTry to renew ticket. The ticket must have the 96b528cefcSMark Murray.Sq renewable 97b528cefcSMark Murrayflag set, and must not be expired. 98b528cefcSMark Murray.It Fl -renewable 99b528cefcSMark MurrayThe same as 100b528cefcSMark Murray.Fl -renewable-life , 101b528cefcSMark Murraywith an infinite time. 102b528cefcSMark Murray.It Xo 1035e9cd1aeSAssar Westerlund.Fl r Ar time Ns , 1045e9cd1aeSAssar Westerlund.Fl -renewable-life= Ns Ar time 105b528cefcSMark Murray.Xc 106b528cefcSMark MurrayThe max renewable ticket life. 107b528cefcSMark Murray.It Xo 108b528cefcSMark Murray.Fl S Ar principal Ns , 109b528cefcSMark Murray.Fl -server= Ns Ar principal 110b528cefcSMark Murray.Xc 111b528cefcSMark MurrayGet a ticket for a service other than krbtgt/LOCAL.REALM. 112b528cefcSMark Murray.It Xo 1135e9cd1aeSAssar Westerlund.Fl s Ar time Ns , 1145e9cd1aeSAssar Westerlund.Fl -start-time= Ns Ar time 115b528cefcSMark Murray.Xc 1165e9cd1aeSAssar WesterlundObtain a ticket that starts to be valid 1175e9cd1aeSAssar Westerlund.Ar time 1185e9cd1aeSAssar Westerlund(which can really be a generic time specification, like 1195e9cd1aeSAssar Westerlund.Sq 1h ) 1205e9cd1aeSAssar Westerlundseconds into the future. 121b528cefcSMark Murray.It Xo 122b528cefcSMark Murray.Fl k Ns , 123b528cefcSMark Murray.Fl -use-keytab 124b528cefcSMark Murray.Xc 125b528cefcSMark MurrayThe same as 126b528cefcSMark Murray.Fl -keytab , 127b528cefcSMark Murraybut with the default keytab name (normally 128b528cefcSMark Murray.Ar FILE:/etc/krb5.keytab ) . 129b528cefcSMark Murray.It Xo 130b528cefcSMark Murray.Fl v Ns , 131b528cefcSMark Murray.Fl -validate 132b528cefcSMark Murray.Xc 133b528cefcSMark MurrayTry to validate an invalid ticket. 134b528cefcSMark Murray.It Xo 135b528cefcSMark Murray.Fl e , 136b528cefcSMark Murray.Fl -enctypes= Ns Ar enctypes 137b528cefcSMark Murray.Xc 138b528cefcSMark MurrayRequest tickets with this particular enctype. 139b528cefcSMark Murray.It Xo 140b528cefcSMark Murray.Fl -fcache-version= Ns Ar version 141b528cefcSMark Murray.Xc 142b528cefcSMark MurrayCreate a credentials cache of version 143b528cefcSMark Murray.Nm version . 144b528cefcSMark Murray.It Xo 14513e3f4d6SMark Murray.Fl -no-addresses 146b528cefcSMark Murray.Xc 147b528cefcSMark MurrayRequest a ticket with no addresses. 1485e9cd1aeSAssar Westerlund.It Xo 1495e9cd1aeSAssar Westerlund.Fl -anonymous 1505e9cd1aeSAssar Westerlund.Xc 1515e9cd1aeSAssar WesterlundRequest an anonymous ticket (which means that the ticket will be 1525e9cd1aeSAssar Westerlundissued to an anonymous principal, typically 1535e9cd1aeSAssar Westerlund.Dq anonymous@REALM). 154b528cefcSMark Murray.El 1555e9cd1aeSAssar Westerlund.Pp 156b528cefcSMark MurrayThe following options are only available if 157b528cefcSMark Murray.Nm 15813e3f4d6SMark Murrayhas been compiled with support for Kerberos 4. The 15913e3f4d6SMark Murray.Nm kauth 16013e3f4d6SMark Murrayprogram is identical to 16113e3f4d6SMark Murray.Nm kinit , 16213e3f4d6SMark Murraybut has these options enabled by 16313e3f4d6SMark Murraydefault. 164b528cefcSMark Murray.Bl -tag -width Ds 165b528cefcSMark Murray.It Xo 166b528cefcSMark Murray.Fl 4 Ns , 167b528cefcSMark Murray.Fl -524init 168b528cefcSMark Murray.Xc 1695e9cd1aeSAssar WesterlundTry to convert the obtained Kerberos 5 krbtgt to a version 4 compatible 170b528cefcSMark Murrayticket. It will store this ticket in the default Kerberos 4 ticket 171b528cefcSMark Murrayfile. 172b528cefcSMark Murray.It Fl -afslog 173b528cefcSMark MurrayGets AFS tickets, converts them to version 4 format, and stores them 174b528cefcSMark Murrayin the kernel. Only useful if you have AFS. 175b528cefcSMark Murray.El 1765e9cd1aeSAssar Westerlund.Pp 1775e9cd1aeSAssar WesterlundThe 1785e9cd1aeSAssar Westerlund.Ar forwardable , 1795e9cd1aeSAssar Westerlund.Ar proxiable , 1805e9cd1aeSAssar Westerlund.Ar ticket_life , 1815e9cd1aeSAssar Westerlundand 1825e9cd1aeSAssar Westerlund.Ar renewable_life 1835e9cd1aeSAssar Westerlundoptions can be set to a default value from the 1845e9cd1aeSAssar Westerlund.Dv appdefaults 1855e9cd1aeSAssar Westerlundsection in krb5.conf, see 1865e9cd1aeSAssar Westerlund.Xr krb5_appdefault 3 . 187b528cefcSMark Murray.Sh ENVIRONMENT 188b528cefcSMark Murray.Bl -tag -width Ds 189b528cefcSMark Murray.It Ev KRB5CCNAME 190b528cefcSMark MurraySpecifies the default cache file. 191b528cefcSMark Murray.It Ev KRB5_CONFIG 192b528cefcSMark MurrayThe directory where the 193b528cefcSMark Murray.Pa krb5.conf 194b528cefcSMark Murraycan be found, default is 195b528cefcSMark Murray.Pa /etc . 196b528cefcSMark Murray.It Ev KRBTKFILE 197b528cefcSMark MurraySpecifies the Kerberos 4 ticket file to store version 4 tickets in. 198b528cefcSMark Murray.El 199b528cefcSMark Murray.\".Sh FILES 200b528cefcSMark Murray.\".Sh EXAMPLES 201b528cefcSMark Murray.\".Sh DIAGNOSTICS 202b528cefcSMark Murray.Sh SEE ALSO 2035e9cd1aeSAssar Westerlund.Xr kdestroy 1 , 204b528cefcSMark Murray.Xr klist 1 , 2055e9cd1aeSAssar Westerlund.Xr krb5.conf 5 , 2065e9cd1aeSAssar Westerlund.Xr krb5_appdefault 3 207b528cefcSMark Murray.\".Sh STANDARDS 208b528cefcSMark Murray.\".Sh HISTORY 209b528cefcSMark Murray.\".Sh AUTHORS 210b528cefcSMark Murray.\".Sh BUGS 211