15e9cd1aeSAssar Westerlund.\" $Id: kinit.1,v 1.8 2001/01/28 21:44:56 assar Exp $ 2b528cefcSMark Murray.\" 3b528cefcSMark Murray.Dd May 29, 1998 413e3f4d6SMark Murray.Dt KINIT 1 5b528cefcSMark Murray.Os HEIMDAL 6b528cefcSMark Murray.Sh NAME 713e3f4d6SMark Murray.Nm kinit , 8b528cefcSMark Murray.Nm kauth 9b528cefcSMark Murray.Nd 10b528cefcSMark Murrayacquire initial tickets 11b528cefcSMark Murray.Sh SYNOPSIS 1213e3f4d6SMark Murray.Nm kinit 135e9cd1aeSAssar Westerlund.Op Fl 4 | Fl -524init 14b528cefcSMark Murray.Op Fl -afslog 155e9cd1aeSAssar Westerlund.Oo Fl c Ar cachename \*(Ba Xo 165e9cd1aeSAssar Westerlund.Fl -cache= Ns Ar cachename Oc 175e9cd1aeSAssar Westerlund.Xc 185e9cd1aeSAssar Westerlund.Op Fl f | Fl -forwardable 195e9cd1aeSAssar Westerlund.Oo Fl t Ar keytabname \*(Ba Xo 205e9cd1aeSAssar Westerlund.Fl -keytab= Ns Ar keytabname Oc 215e9cd1aeSAssar Westerlund.Xc 225e9cd1aeSAssar Westerlund.Oo Fl l Ar time \*(Ba Xo 235e9cd1aeSAssar Westerlund.Fl -lifetime= Ns Ar time Oc 245e9cd1aeSAssar Westerlund.Xc 255e9cd1aeSAssar Westerlund.Op Fl p | Fl -proxiable 265e9cd1aeSAssar Westerlund.Op Fl R | Fl -renew 27b528cefcSMark Murray.Op Fl -renewable 285e9cd1aeSAssar Westerlund.Oo Fl r Ar time \*(Ba Xo 295e9cd1aeSAssar Westerlund.Fl -renewable-life= Ns Ar time Oc 305e9cd1aeSAssar Westerlund.Xc 315e9cd1aeSAssar Westerlund.Oo Fl S Ar principal \*(Ba Xo 325e9cd1aeSAssar Westerlund.Fl -server= Ns Ar principal Oc 335e9cd1aeSAssar Westerlund.Xc 345e9cd1aeSAssar Westerlund.Oo Fl s Ar time \*(Ba Xo 355e9cd1aeSAssar Westerlund.Fl -start-time= Ns Ar time Oc 365e9cd1aeSAssar Westerlund.Xc 375e9cd1aeSAssar Westerlund.Op Fl k | Fl -use-keytab 385e9cd1aeSAssar Westerlund.Op Fl v | Fl -validate 395e9cd1aeSAssar Westerlund.Oo Fl e Ar enctype \*(Ba Xo 405e9cd1aeSAssar Westerlund.Fl -enctypes= Ns Ar enctype Oc 415e9cd1aeSAssar Westerlund.Xc 425e9cd1aeSAssar Westerlund.Op Fl -fcache-version= Ns Ar integer 4313e3f4d6SMark Murray.Op Fl -no-addresses 445e9cd1aeSAssar Westerlund.Op Fl -anonymous 45b528cefcSMark Murray.Op Fl -version 46b528cefcSMark Murray.Op Fl -help 47b528cefcSMark Murray.Op Ar principal 48b528cefcSMark Murray.Sh DESCRIPTION 49b528cefcSMark Murray.Nm 50b528cefcSMark Murrayis used to authenticate to the kerberos server as 51b528cefcSMark Murray.Ar principal , 525e9cd1aeSAssar Westerlundor if none is given, a system generated default (typically your login 535e9cd1aeSAssar Westerlundname at the default realm), and acquire a ticket granting ticket that 545e9cd1aeSAssar Westerlundcan later be used to obtain tickets for other services. 555e9cd1aeSAssar Westerlund.Pp 565e9cd1aeSAssar WesterlundIf you have compiled kinit with Kerberos 4 support and you have a 575e9cd1aeSAssar WesterlundKerberos 4 server, 585e9cd1aeSAssar Westerlund.Nm 595e9cd1aeSAssar Westerlundwill detect this and get you Kerberos 4 tickets. 605e9cd1aeSAssar Westerlund.Pp 61b528cefcSMark MurraySupported options: 62b528cefcSMark Murray.Bl -tag -width Ds 63b528cefcSMark Murray.It Xo 64b528cefcSMark Murray.Fl c Ar cachename 65b528cefcSMark Murray.Fl -cache= Ns Ar cachename 66b528cefcSMark Murray.Xc 67b528cefcSMark MurrayThe credentials cache to put the acquired ticket in, if other than 68b528cefcSMark Murraydefault. 69b528cefcSMark Murray.It Xo 70b528cefcSMark Murray.Fl f Ns , 71b528cefcSMark Murray.Fl -forwardable 72b528cefcSMark Murray.Xc 73b528cefcSMark MurrayGet ticket that can be forwarded to another host. 74b528cefcSMark Murray.It Xo 75b528cefcSMark Murray.Fl t Ar keytabname Ns , 76b528cefcSMark Murray.Fl -keytab= Ns Ar keytabname 77b528cefcSMark Murray.Xc 78b528cefcSMark MurrayDon't ask for a password, but instead get the key from the specified 79b528cefcSMark Murraykeytab. 80b528cefcSMark Murray.It Xo 815e9cd1aeSAssar Westerlund.Fl l Ar time Ns , 825e9cd1aeSAssar Westerlund.Fl -lifetime= Ns Ar time 83b528cefcSMark Murray.Xc 845e9cd1aeSAssar WesterlundSpecifies the lifetime of the ticket. The argument can either be in 855e9cd1aeSAssar Westerlundseconds, or a more human readable string like 865e9cd1aeSAssar Westerlund.Sq 1h . 87b528cefcSMark Murray.It Xo 88b528cefcSMark Murray.Fl p Ns , 89b528cefcSMark Murray.Fl -proxiable 90b528cefcSMark Murray.Xc 91b528cefcSMark MurrayRequest tickets with the proxiable flag set. 92b528cefcSMark Murray.It Xo 93b528cefcSMark Murray.Fl R Ns , 94b528cefcSMark Murray.Fl -renew 95b528cefcSMark Murray.Xc 96b528cefcSMark MurrayTry to renew ticket. The ticket must have the 97b528cefcSMark Murray.Sq renewable 98b528cefcSMark Murrayflag set, and must not be expired. 99b528cefcSMark Murray.It Fl -renewable 100b528cefcSMark MurrayThe same as 101b528cefcSMark Murray.Fl -renewable-life , 102b528cefcSMark Murraywith an infinite time. 103b528cefcSMark Murray.It Xo 1045e9cd1aeSAssar Westerlund.Fl r Ar time Ns , 1055e9cd1aeSAssar Westerlund.Fl -renewable-life= Ns Ar time 106b528cefcSMark Murray.Xc 107b528cefcSMark MurrayThe max renewable ticket life. 108b528cefcSMark Murray.It Xo 109b528cefcSMark Murray.Fl S Ar principal Ns , 110b528cefcSMark Murray.Fl -server= Ns Ar principal 111b528cefcSMark Murray.Xc 112b528cefcSMark MurrayGet a ticket for a service other than krbtgt/LOCAL.REALM. 113b528cefcSMark Murray.It Xo 1145e9cd1aeSAssar Westerlund.Fl s Ar time Ns , 1155e9cd1aeSAssar Westerlund.Fl -start-time= Ns Ar time 116b528cefcSMark Murray.Xc 1175e9cd1aeSAssar WesterlundObtain a ticket that starts to be valid 1185e9cd1aeSAssar Westerlund.Ar time 1195e9cd1aeSAssar Westerlund(which can really be a generic time specification, like 1205e9cd1aeSAssar Westerlund.Sq 1h ) 1215e9cd1aeSAssar Westerlundseconds into the future. 122b528cefcSMark Murray.It Xo 123b528cefcSMark Murray.Fl k Ns , 124b528cefcSMark Murray.Fl -use-keytab 125b528cefcSMark Murray.Xc 126b528cefcSMark MurrayThe same as 127b528cefcSMark Murray.Fl -keytab , 128b528cefcSMark Murraybut with the default keytab name (normally 129b528cefcSMark Murray.Ar FILE:/etc/krb5.keytab ) . 130b528cefcSMark Murray.It Xo 131b528cefcSMark Murray.Fl v Ns , 132b528cefcSMark Murray.Fl -validate 133b528cefcSMark Murray.Xc 134b528cefcSMark MurrayTry to validate an invalid ticket. 135b528cefcSMark Murray.It Xo 136b528cefcSMark Murray.Fl e , 137b528cefcSMark Murray.Fl -enctypes= Ns Ar enctypes 138b528cefcSMark Murray.Xc 139b528cefcSMark MurrayRequest tickets with this particular enctype. 140b528cefcSMark Murray.It Xo 141b528cefcSMark Murray.Fl -fcache-version= Ns Ar version 142b528cefcSMark Murray.Xc 143b528cefcSMark MurrayCreate a credentials cache of version 144b528cefcSMark Murray.Nm version . 145b528cefcSMark Murray.It Xo 14613e3f4d6SMark Murray.Fl -no-addresses 147b528cefcSMark Murray.Xc 148b528cefcSMark MurrayRequest a ticket with no addresses. 1495e9cd1aeSAssar Westerlund.It Xo 1505e9cd1aeSAssar Westerlund.Fl -anonymous 1515e9cd1aeSAssar Westerlund.Xc 1525e9cd1aeSAssar WesterlundRequest an anonymous ticket (which means that the ticket will be 1535e9cd1aeSAssar Westerlundissued to an anonymous principal, typically 1545e9cd1aeSAssar Westerlund.Dq anonymous@REALM). 155b528cefcSMark Murray.El 1565e9cd1aeSAssar Westerlund.Pp 157b528cefcSMark MurrayThe following options are only available if 158b528cefcSMark Murray.Nm 15913e3f4d6SMark Murrayhas been compiled with support for Kerberos 4. The 16013e3f4d6SMark Murray.Nm kauth 16113e3f4d6SMark Murrayprogram is identical to 16213e3f4d6SMark Murray.Nm kinit , 16313e3f4d6SMark Murraybut has these options enabled by 16413e3f4d6SMark Murraydefault. 165b528cefcSMark Murray.Bl -tag -width Ds 166b528cefcSMark Murray.It Xo 167b528cefcSMark Murray.Fl 4 Ns , 168b528cefcSMark Murray.Fl -524init 169b528cefcSMark Murray.Xc 1705e9cd1aeSAssar WesterlundTry to convert the obtained Kerberos 5 krbtgt to a version 4 compatible 171b528cefcSMark Murrayticket. It will store this ticket in the default Kerberos 4 ticket 172b528cefcSMark Murrayfile. 173b528cefcSMark Murray.It Fl -afslog 174b528cefcSMark MurrayGets AFS tickets, converts them to version 4 format, and stores them 175b528cefcSMark Murrayin the kernel. Only useful if you have AFS. 176b528cefcSMark Murray.El 1775e9cd1aeSAssar Westerlund.Pp 1785e9cd1aeSAssar WesterlundThe 1795e9cd1aeSAssar Westerlund.Ar forwardable , 1805e9cd1aeSAssar Westerlund.Ar proxiable , 1815e9cd1aeSAssar Westerlund.Ar ticket_life , 1825e9cd1aeSAssar Westerlundand 1835e9cd1aeSAssar Westerlund.Ar renewable_life 1845e9cd1aeSAssar Westerlundoptions can be set to a default value from the 1855e9cd1aeSAssar Westerlund.Dv appdefaults 1865e9cd1aeSAssar Westerlundsection in krb5.conf, see 1875e9cd1aeSAssar Westerlund.Xr krb5_appdefault 3 . 188b528cefcSMark Murray.Sh ENVIRONMENT 189b528cefcSMark Murray.Bl -tag -width Ds 190b528cefcSMark Murray.It Ev KRB5CCNAME 191b528cefcSMark MurraySpecifies the default cache file. 192b528cefcSMark Murray.It Ev KRB5_CONFIG 193b528cefcSMark MurrayThe directory where the 194b528cefcSMark Murray.Pa krb5.conf 195b528cefcSMark Murraycan be found, default is 196b528cefcSMark Murray.Pa /etc . 197b528cefcSMark Murray.It Ev KRBTKFILE 198b528cefcSMark MurraySpecifies the Kerberos 4 ticket file to store version 4 tickets in. 199b528cefcSMark Murray.El 200b528cefcSMark Murray.\".Sh FILES 201b528cefcSMark Murray.\".Sh EXAMPLES 202b528cefcSMark Murray.\".Sh DIAGNOSTICS 203b528cefcSMark Murray.Sh SEE ALSO 2045e9cd1aeSAssar Westerlund.Xr kdestroy 1 , 205b528cefcSMark Murray.Xr klist 1 , 2065e9cd1aeSAssar Westerlund.Xr krb5.conf 5 , 2075e9cd1aeSAssar Westerlund.Xr krb5_appdefault 3 208b528cefcSMark Murray.\".Sh STANDARDS 209b528cefcSMark Murray.\".Sh HISTORY 210b528cefcSMark Murray.\".Sh AUTHORS 211b528cefcSMark Murray.\".Sh BUGS 212