xref: /freebsd/crypto/heimdal/kuser/klist.1 (revision 193d9e768ba63fcfb187cfd17f461f7d41345048)
1.\" Copyright (c) 2000 - 2005 Kungliga Tekniska Högskolan
2.\" (Royal Institute of Technology, Stockholm, Sweden).
3.\" All rights reserved.
4.\"
5.\" Redistribution and use in source and binary forms, with or without
6.\" modification, are permitted provided that the following conditions
7.\" are met:
8.\"
9.\" 1. Redistributions of source code must retain the above copyright
10.\"    notice, this list of conditions and the following disclaimer.
11.\"
12.\" 2. Redistributions in binary form must reproduce the above copyright
13.\"    notice, this list of conditions and the following disclaimer in the
14.\"    documentation and/or other materials provided with the distribution.
15.\"
16.\" 3. Neither the name of the Institute nor the names of its contributors
17.\"    may be used to endorse or promote products derived from this software
18.\"    without specific prior written permission.
19.\"
20.\" THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
21.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
24.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30.\" SUCH DAMAGE.
31.\"
32.\" $Id$
33.\"
34.Dd October  6, 2005
35.Dt KLIST 1
36.Os HEIMDAL
37.Sh NAME
38.Nm klist
39.Nd list Kerberos credentials
40.Sh SYNOPSIS
41.Nm
42.Bk -words
43.Oo Fl c Ar cache \*(Ba Xo
44.Fl Fl cache= Ns Ar cache
45.Xc
46.Oc
47.Op Fl s | Fl t | Fl Fl test
48.Op Fl T | Fl Fl tokens
49.Op Fl 5 | Fl Fl v5
50.Op Fl v | Fl Fl verbose
51.Op Fl l | Fl Fl list-caches
52.Op Fl f
53.Op Fl Fl version
54.Op Fl Fl help
55.Ek
56.Sh DESCRIPTION
57.Nm
58reads and displays the current tickets in the credential cache (also
59known as the ticket file).
60.Pp
61Options supported:
62.Bl -tag -width Ds
63.It Fl c Ar cache , Fl Fl cache= Ns Ar cache
64credential cache to list
65.It Fl s , Fl t , Fl Fl test
66Test for there being an active and valid TGT for the local realm of
67the user in the credential cache.
68.It Fl T , Fl Fl tokens
69display AFS tokens
70.It Fl 5 , Fl Fl v5
71display v5 cred cache (this is the default)
72.It Fl f
73Include ticket flags in short form, each character stands for a
74specific flag, as follows:
75.Bl -tag -width  XXX -compact -offset indent
76.It F
77forwardable
78.It f
79forwarded
80.It P
81proxiable
82.It p
83proxied
84.It D
85postdate-able
86.It d
87postdated
88.It R
89renewable
90.It I
91initial
92.It i
93invalid
94.It A
95pre-authenticated
96.It H
97hardware authenticated
98.El
99.Pp
100This information is also output with the
101.Fl Fl verbose
102option, but in a more verbose way.
103.It Fl v , Fl Fl verbose
104Verbose output. Include all possible information:
105.Bl -tag -width XXXX -offset indent
106.It Server
107the principal the ticket is for
108.It Ticket etype
109the encryption type used in the ticket, followed by the key version of
110the ticket, if it is available
111.It Session key
112the encryption type of the session key, if it's different from the
113encryption type of the ticket
114.It Auth time
115the time the authentication exchange took place
116.It Start time
117the time that this ticket is valid from (only printed if it's
118different from the auth time)
119.It End time
120when the ticket expires, if it has already expired this is also noted
121.It Renew till
122the maximum possible end time of any ticket derived from this one
123.It Ticket flags
124the flags set on the ticket
125.It Addresses
126the set of addresses from which this ticket is valid
127.El
128.It Fl l , Fl Fl list-caches
129List the credential caches for the current users, not all cache types
130supports listing multiple caches.
131.Pp
132.El
133.Sh SEE ALSO
134.Xr kdestroy 1 ,
135.Xr kinit 1
136