xref: /freebsd/crypto/heimdal/kuser/klist.1 (revision 45524cd79e498d0465de59a4c8c825709b2662df)
1.\" $Id: klist.1,v 1.6 2000/07/08 20:47:58 joda Exp $
2.\"
3.Dd July 8, 2000
4.Dt KLIST 1
5.Os HEIMDAL
6.Sh NAME
7.Nm klist
8.Nd list Kerberos credentials
9.Sh SYNOPSIS
10.Nm
11.Oo Fl c Ar cache \*(Ba Xo
12.Fl -cache= Ns Ar cache Oc
13.Xc
14.Op Fl s | Fl t | Fl -test
15.Op Fl 4 | Fl -v4
16.Op Fl T | Fl -tokens
17.Op Fl 5 | Fl -v5
18.Op Fl v | Fl -verbose
19.Op Fl f
20.Op Fl -version
21.Op Fl -help
22.Sh DESCRIPTION
23.Nm
24reads and displays the current tickets in the crential cache (also
25known as the ticket file).
26.Pp
27Options supported:
28.Bl -tag -width Ds
29.It Xo
30.Fl c Ar cache Ns ,
31.Fl -cache= Ns Ar cache
32.Xc
33credentials cache to list
34.It Xo
35.Fl s Ns ,
36.Fl t Ns ,
37.Fl -test
38.Xc
39Test for there being an active and valid TGT for the local realm of
40the user in the credential cache.
41.It Xo
42.Fl 4 Ns ,
43.Fl -v4
44.Xc
45display v4 tickets
46.It Xo
47.Fl T Ns ,
48.Fl -tokens
49.Xc
50display AFS tokens
51.It Xo
52.Fl 5 Ns ,
53.Fl -v5
54.Xc
55display v5 cred cache (this is the default)
56.It Fl f
57Include ticket flags in short form, each charcted stands for a
58specific flag, as follows:
59.Bl -tag -width  XXX -compact -offset indent
60.It F
61forwardable
62.It f
63forwarded
64.It P
65proxiable
66.It p
67proxied
68.It D
69postdate-able
70.It d
71postdated
72.It R
73renewable
74.It I
75initial
76.It i
77invalid
78.It A
79pre-authenticated
80.It H
81hardware authenticated
82.El
83.Pp
84This information is also output with the
85.Fl -verbose
86option, but in a more verbose way.
87.It Xo
88.Fl v Ns ,
89.Fl -verbose
90.Xc
91Verbose output. Include all possible information:
92.Bl -tag -width XXXX -offset indent
93.It Server
94the princial the ticket is for
95.It Ticket etype
96the encryption type use in the ticket, followed by the key version of
97the ticket, if it is available
98.It Session key
99the encryption type of the session key, if it's different from the
100encryption type of the ticket
101.It Auth time
102the time the authentication exchange took place
103.It Start time
104the time that this tickets is valid from (only printed if it's
105different from the auth time)
106.It End time
107when the ticket expires, if it has already expired this is also noted
108.It Renew till
109the maximum possible end time of any ticket derived from this one
110.It Ticket flags
111the flags set on the ticket
112.It Addresses
113the set of addresses from which this ticket is valid
114.El
115.El
116.Sh SEE ALSO
117.Xr kinit 1 ,
118.Xr kdestroy 1
119