1b528cefcSMark Murray.\" $Id: kinit.1,v 1.3 1999/05/14 14:02:49 assar Exp $ 2b528cefcSMark Murray.\" 3b528cefcSMark Murray.Dd May 29, 1998 4b528cefcSMark Murray.Dt KAUTH 1 5b528cefcSMark Murray.Os HEIMDAL 6b528cefcSMark Murray.Sh NAME 7b528cefcSMark Murray.Nm kauth 8b528cefcSMark Murray.Nd 9b528cefcSMark Murrayacquire initial tickets 10b528cefcSMark Murray.Sh SYNOPSIS 11b528cefcSMark Murray.Nm 12b528cefcSMark Murray.Op Fl 4 13b528cefcSMark Murray.Op Fl -524init 14b528cefcSMark Murray.Op Fl -afslog 15b528cefcSMark Murray.Op Fl c Ar cachename 16b528cefcSMark Murray.Op Fl -cache= Ns Ar cachename 17b528cefcSMark Murray.Op Fl c Ar cachename 18b528cefcSMark Murray.Op Fl -cache= Ns Ar cachename 19b528cefcSMark Murray.Op Fl f 20b528cefcSMark Murray.Op Fl -forwardable 21b528cefcSMark Murray.Op Fl t Ar keytabname 22b528cefcSMark Murray.Op Fl -keytab= Ns Ar keytabname 23b528cefcSMark Murray.Op Fl l Ar seconds 24b528cefcSMark Murray.Op Fl -lifetime= Ns Ar seconds 25b528cefcSMark Murray.Op Fl p 26b528cefcSMark Murray.Op Fl -proxiable 27b528cefcSMark Murray.Op Fl R 28b528cefcSMark Murray.Op Fl -renew 29b528cefcSMark Murray.Op Fl -renewable 30b528cefcSMark Murray.Op Fl r Ar seconds 31b528cefcSMark Murray.Op Fl -renewable-life= Ns Ar seconds 32b528cefcSMark Murray.Op Fl S Ar principal 33b528cefcSMark Murray.Op Fl -server= Ns Ar principal 34b528cefcSMark Murray.Op Fl s Ar seconds 35b528cefcSMark Murray.Op Fl -start-time= Ns Ar seconds 36b528cefcSMark Murray.Op Fl k 37b528cefcSMark Murray.Op Fl -use-keytab 38b528cefcSMark Murray.Op Fl v 39b528cefcSMark Murray.Op Fl -validate 40b528cefcSMark Murray.Op Fl e 41b528cefcSMark Murray.Op Fl -enctypes= Ns Ar enctypes 42b528cefcSMark Murray.Op Fl -fcache-version= Ns Ar version 43b528cefcSMark Murray.Op Fl -noaddresses 44b528cefcSMark Murray.Op Fl -version 45b528cefcSMark Murray.Op Fl -help 46b528cefcSMark Murray.Op Ar principal 47b528cefcSMark Murray.Sh DESCRIPTION 48b528cefcSMark Murray.Nm 49b528cefcSMark Murrayis used to authenticate to the kerberos server as 50b528cefcSMark Murray.Ar principal , 51b528cefcSMark Murrayor if none is given, a system generated default, and acquire a ticket 52b528cefcSMark Murraygranting ticket that can later be used to obtain tickets for other 53b528cefcSMark Murrayservices. 54b528cefcSMark MurraySupported options: 55b528cefcSMark Murray.Bl -tag -width Ds 56b528cefcSMark Murray.It Xo 57b528cefcSMark Murray.Fl c Ar cachename 58b528cefcSMark Murray.Fl -cache= Ns Ar cachename 59b528cefcSMark Murray.Xc 60b528cefcSMark MurrayThe credentials cache to put the acquired ticket in, if other than 61b528cefcSMark Murraydefault. 62b528cefcSMark Murray.It Xo 63b528cefcSMark Murray.Fl f Ns , 64b528cefcSMark Murray.Fl -forwardable 65b528cefcSMark Murray.Xc 66b528cefcSMark MurrayGet ticket that can be forwarded to another host. 67b528cefcSMark Murray.It Xo 68b528cefcSMark Murray.Fl t Ar keytabname Ns , 69b528cefcSMark Murray.Fl -keytab= Ns Ar keytabname 70b528cefcSMark Murray.Xc 71b528cefcSMark MurrayDon't ask for a password, but instead get the key from the specified 72b528cefcSMark Murraykeytab. 73b528cefcSMark Murray.It Xo 74b528cefcSMark Murray.Fl l Ar seconds Ns , 75b528cefcSMark Murray.Fl -lifetime= Ns Ar seconds 76b528cefcSMark Murray.Xc 77b528cefcSMark MurraySpecifies the lifetime of the ticket. 78b528cefcSMark Murray.It Xo 79b528cefcSMark Murray.Fl p Ns , 80b528cefcSMark Murray.Fl -proxiable 81b528cefcSMark Murray.Xc 82b528cefcSMark MurrayRequest tickets with the proxiable flag set. 83b528cefcSMark Murray.It Xo 84b528cefcSMark Murray.Fl R Ns , 85b528cefcSMark Murray.Fl -renew 86b528cefcSMark Murray.Xc 87b528cefcSMark MurrayTry to renew ticket. The ticket must have the 88b528cefcSMark Murray.Sq renewable 89b528cefcSMark Murrayflag set, and must not be expired. 90b528cefcSMark Murray.It Fl -renewable 91b528cefcSMark MurrayThe same as 92b528cefcSMark Murray.Fl -renewable-life , 93b528cefcSMark Murraywith an infinite time. 94b528cefcSMark Murray.It Xo 95b528cefcSMark Murray.Fl r Ar seconds Ns , 96b528cefcSMark Murray.Fl -renewable-life= Ns Ar seconds 97b528cefcSMark Murray.Xc 98b528cefcSMark MurrayThe max renewable ticket life. 99b528cefcSMark Murray.It Xo 100b528cefcSMark Murray.Fl S Ar principal Ns , 101b528cefcSMark Murray.Fl -server= Ns Ar principal 102b528cefcSMark Murray.Xc 103b528cefcSMark MurrayGet a ticket for a service other than krbtgt/LOCAL.REALM. 104b528cefcSMark Murray.It Xo 105b528cefcSMark Murray.Fl s Ar seconds Ns , 106b528cefcSMark Murray.Fl -start-time= Ns Ar seconds 107b528cefcSMark Murray.Xc 108b528cefcSMark MurrayStart time of ticket, if other than the current time. 109b528cefcSMark Murray.It Xo 110b528cefcSMark Murray.Fl k Ns , 111b528cefcSMark Murray.Fl -use-keytab 112b528cefcSMark Murray.Xc 113b528cefcSMark MurrayThe same as 114b528cefcSMark Murray.Fl -keytab , 115b528cefcSMark Murraybut with the default keytab name (normally 116b528cefcSMark Murray.Ar FILE:/etc/krb5.keytab ) . 117b528cefcSMark Murray.It Xo 118b528cefcSMark Murray.Fl v Ns , 119b528cefcSMark Murray.Fl -validate 120b528cefcSMark Murray.Xc 121b528cefcSMark MurrayTry to validate an invalid ticket. 122b528cefcSMark Murray.It Xo 123b528cefcSMark Murray.Fl e , 124b528cefcSMark Murray.Fl -enctypes= Ns Ar enctypes 125b528cefcSMark Murray.Xc 126b528cefcSMark MurrayRequest tickets with this particular enctype. 127b528cefcSMark Murray.It Xo 128b528cefcSMark Murray.Fl -fcache-version= Ns Ar version 129b528cefcSMark Murray.Xc 130b528cefcSMark MurrayCreate a credentials cache of version 131b528cefcSMark Murray.Nm version . 132b528cefcSMark Murray.It Xo 133b528cefcSMark Murray.Fl -noaddresses 134b528cefcSMark Murray.Xc 135b528cefcSMark MurrayRequest a ticket with no addresses. 136b528cefcSMark Murray.El 137b528cefcSMark Murray 138b528cefcSMark MurrayThe following options are only available if 139b528cefcSMark Murray.Nm 140b528cefcSMark Murrayhas been compiled with support for Kerberos 4. 141b528cefcSMark Murray.Bl -tag -width Ds 142b528cefcSMark Murray.It Xo 143b528cefcSMark Murray.Fl 4 Ns , 144b528cefcSMark Murray.Fl -524init 145b528cefcSMark Murray.Xc 146b528cefcSMark MurrayTry to convert the obtained krbtgt to a version 4 compatible 147b528cefcSMark Murrayticket. It will store this ticket in the default Kerberos 4 ticket 148b528cefcSMark Murrayfile. 149b528cefcSMark Murray.It Fl -afslog 150b528cefcSMark MurrayGets AFS tickets, converts them to version 4 format, and stores them 151b528cefcSMark Murrayin the kernel. Only useful if you have AFS. 152b528cefcSMark Murray.El 153b528cefcSMark Murray.Sh ENVIRONMENT 154b528cefcSMark Murray.Bl -tag -width Ds 155b528cefcSMark Murray.It Ev KRB5CCNAME 156b528cefcSMark MurraySpecifies the default cache file. 157b528cefcSMark Murray.It Ev KRB5_CONFIG 158b528cefcSMark MurrayThe directory where the 159b528cefcSMark Murray.Pa krb5.conf 160b528cefcSMark Murraycan be found, default is 161b528cefcSMark Murray.Pa /etc . 162b528cefcSMark Murray.It Ev KRBTKFILE 163b528cefcSMark MurraySpecifies the Kerberos 4 ticket file to store version 4 tickets in. 164b528cefcSMark Murray.El 165b528cefcSMark Murray.\".Sh FILES 166b528cefcSMark Murray.\".Sh EXAMPLES 167b528cefcSMark Murray.\".Sh DIAGNOSTICS 168b528cefcSMark Murray.Sh SEE ALSO 169b528cefcSMark Murray.Xr krb5.conf 5 , 170b528cefcSMark Murray.Xr klist 1 , 171b528cefcSMark Murray.Xr kdestroy 1 172b528cefcSMark Murray.\".Sh STANDARDS 173b528cefcSMark Murray.\".Sh HISTORY 174b528cefcSMark Murray.\".Sh AUTHORS 175b528cefcSMark Murray.\".Sh BUGS 176