xref: /freebsd/crypto/heimdal/kuser/klist.1 (revision 8373020d34ceb1ac55d8f43333c1ca3680185b39)
1.\" $Id: klist.1,v 1.11 2002/08/20 17:07:14 joda Exp $
2.\"
3.Dd July 8, 2000
4.Dt KLIST 1
5.Os HEIMDAL
6.Sh NAME
7.Nm klist
8.Nd list Kerberos credentials
9.Sh SYNOPSIS
10.Nm
11.Oo Fl c Ar cache \*(Ba Xo
12.Fl -cache= Ns Ar cache
13.Xc
14.Oc
15.Op Fl s | Fl t | Fl -test
16.Op Fl 4 | Fl -v4
17.Op Fl T | Fl -tokens
18.Op Fl 5 | Fl -v5
19.Op Fl v | Fl -verbose
20.Op Fl f
21.Op Fl -version
22.Op Fl -help
23.Sh DESCRIPTION
24.Nm
25reads and displays the current tickets in the crential cache (also
26known as the ticket file).
27.Pp
28Options supported:
29.Bl -tag -width Ds
30.It Xo
31.Fl c Ar cache ,
32.Fl -cache= Ns Ar cache
33.Xc
34credentials cache to list
35.It Xo
36.Fl s ,
37.Fl t ,
38.Fl -test
39.Xc
40Test for there being an active and valid TGT for the local realm of
41the user in the credential cache.
42.It Xo
43.Fl 4 ,
44.Fl -v4
45.Xc
46display v4 tickets
47.It Xo
48.Fl T ,
49.Fl -tokens
50.Xc
51display AFS tokens
52.It Xo
53.Fl 5 ,
54.Fl -v5
55.Xc
56display v5 cred cache (this is the default)
57.It Fl f
58Include ticket flags in short form, each charcted stands for a
59specific flag, as follows:
60.Bl -tag -width  XXX -compact -offset indent
61.It F
62forwardable
63.It f
64forwarded
65.It P
66proxiable
67.It p
68proxied
69.It D
70postdate-able
71.It d
72postdated
73.It R
74renewable
75.It I
76initial
77.It i
78invalid
79.It A
80pre-authenticated
81.It H
82hardware authenticated
83.El
84.Pp
85This information is also output with the
86.Fl -verbose
87option, but in a more verbose way.
88.It Xo
89.Fl v ,
90.Fl -verbose
91.Xc
92Verbose output. Include all possible information:
93.Bl -tag -width XXXX -offset indent
94.It Server
95the princial the ticket is for
96.It Ticket etype
97the encryption type use in the ticket, followed by the key version of
98the ticket, if it is available
99.It Session key
100the encryption type of the session key, if it's different from the
101encryption type of the ticket
102.It Auth time
103the time the authentication exchange took place
104.It Start time
105the time that this tickets is valid from (only printed if it's
106different from the auth time)
107.It End time
108when the ticket expires, if it has already expired this is also noted
109.It Renew till
110the maximum possible end time of any ticket derived from this one
111.It Ticket flags
112the flags set on the ticket
113.It Addresses
114the set of addresses from which this ticket is valid
115.El
116.El
117.Sh SEE ALSO
118.Xr kdestroy 1 ,
119.Xr kinit 1
120