xref: /freebsd/crypto/heimdal/kuser/kinit.1 (revision daf1cffce2e07931f27c6c6998652e90df6ba87e)
1.\" $Id: kinit.1,v 1.4 2000/02/01 14:12:13 joda Exp $
2.\"
3.Dd May 29, 1998
4.Dt KINIT 1
5.Os HEIMDAL
6.Sh NAME
7.Nm kinit ,
8.Nm kauth
9.Nd
10acquire initial tickets
11.Sh SYNOPSIS
12.Nm kinit
13.Op Fl 4
14.Op Fl -524init
15.Op Fl -afslog
16.Op Fl c Ar cachename
17.Op Fl -cache= Ns Ar cachename
18.Op Fl c Ar cachename
19.Op Fl -cache= Ns Ar cachename
20.Op Fl f
21.Op Fl -forwardable
22.Op Fl t Ar keytabname
23.Op Fl -keytab= Ns Ar keytabname
24.Op Fl l Ar seconds
25.Op Fl -lifetime= Ns Ar seconds
26.Op Fl p
27.Op Fl -proxiable
28.Op Fl R
29.Op Fl -renew
30.Op Fl -renewable
31.Op Fl r Ar seconds
32.Op Fl -renewable-life= Ns Ar seconds
33.Op Fl S Ar principal
34.Op Fl -server= Ns Ar principal
35.Op Fl s Ar seconds
36.Op Fl -start-time= Ns Ar seconds
37.Op Fl k
38.Op Fl -use-keytab
39.Op Fl v
40.Op Fl -validate
41.Op Fl e
42.Op Fl -enctypes= Ns Ar enctypes
43.Op Fl -fcache-version= Ns Ar version
44.Op Fl -no-addresses
45.Op Fl -version
46.Op Fl -help
47.Op Ar principal
48.Sh DESCRIPTION
49.Nm
50is used to authenticate to the kerberos server as
51.Ar principal ,
52or if none is given, a system generated default, and acquire a ticket
53granting ticket that can later be used to obtain tickets for other
54services.
55Supported options:
56.Bl -tag -width Ds
57.It Xo
58.Fl c Ar cachename
59.Fl -cache= Ns Ar cachename
60.Xc
61The credentials cache to put the acquired ticket in, if other than
62default.
63.It Xo
64.Fl f Ns ,
65.Fl -forwardable
66.Xc
67Get ticket that can be forwarded to another host.
68.It Xo
69.Fl t Ar keytabname Ns ,
70.Fl -keytab= Ns Ar keytabname
71.Xc
72Don't ask for a password, but instead get the key from the specified
73keytab.
74.It Xo
75.Fl l Ar seconds Ns ,
76.Fl -lifetime= Ns Ar seconds
77.Xc
78Specifies the lifetime of the ticket.
79.It Xo
80.Fl p Ns ,
81.Fl -proxiable
82.Xc
83Request tickets with the proxiable flag set.
84.It Xo
85.Fl R Ns ,
86.Fl -renew
87.Xc
88Try to renew ticket. The ticket must have the
89.Sq renewable
90flag set, and must not be expired.
91.It Fl -renewable
92The same as
93.Fl -renewable-life ,
94with an infinite time.
95.It Xo
96.Fl r Ar seconds Ns ,
97.Fl -renewable-life= Ns Ar seconds
98.Xc
99The max renewable ticket life.
100.It Xo
101.Fl S Ar principal Ns ,
102.Fl -server= Ns Ar principal
103.Xc
104Get a ticket for a service other than krbtgt/LOCAL.REALM.
105.It Xo
106.Fl s Ar seconds Ns ,
107.Fl -start-time= Ns Ar seconds
108.Xc
109Start time of ticket, if other than the current time.
110.It Xo
111.Fl k Ns ,
112.Fl -use-keytab
113.Xc
114The same as
115.Fl -keytab ,
116but with the default keytab name (normally
117.Ar FILE:/etc/krb5.keytab ) .
118.It Xo
119.Fl v Ns ,
120.Fl -validate
121.Xc
122Try to validate an invalid ticket.
123.It Xo
124.Fl e ,
125.Fl -enctypes= Ns Ar enctypes
126.Xc
127Request tickets with this particular enctype.
128.It Xo
129.Fl -fcache-version= Ns Ar version
130.Xc
131Create a credentials cache of version
132.Nm version .
133.It Xo
134.Fl -no-addresses
135.Xc
136Request a ticket with no addresses.
137.El
138
139The following options are only available if
140.Nm
141has been compiled with support for Kerberos 4. The
142.Nm kauth
143program is identical to
144.Nm kinit ,
145but has these options enabled by
146default.
147.Bl -tag -width Ds
148.It Xo
149.Fl 4 Ns ,
150.Fl -524init
151.Xc
152Try to convert the obtained krbtgt to a version 4 compatible
153ticket. It will store this ticket in the default Kerberos 4 ticket
154file.
155.It Fl -afslog
156Gets AFS tickets, converts them to version 4 format, and stores them
157in the kernel. Only useful if you have AFS.
158.El
159.Sh ENVIRONMENT
160.Bl -tag -width Ds
161.It Ev KRB5CCNAME
162Specifies the default cache file.
163.It Ev KRB5_CONFIG
164The directory where the
165.Pa krb5.conf
166can be found, default is
167.Pa /etc .
168.It Ev KRBTKFILE
169Specifies the Kerberos 4 ticket file to store version 4 tickets in.
170.El
171.\".Sh FILES
172.\".Sh EXAMPLES
173.\".Sh DIAGNOSTICS
174.Sh SEE ALSO
175.Xr krb5.conf 5 ,
176.Xr klist 1 ,
177.Xr kdestroy 1
178.\".Sh STANDARDS
179.\".Sh HISTORY
180.\".Sh AUTHORS
181.\".Sh BUGS
182