xref: /freebsd/crypto/heimdal/kuser/klist.1 (revision 9a14aa017b21c292740c00ee098195cd46642730)
1.\" Copyright (c) 2000 - 2005 Kungliga Tekniska H�gskolan
2.\" (Royal Institute of Technology, Stockholm, Sweden).
3.\" All rights reserved.
4.\"
5.\" Redistribution and use in source and binary forms, with or without
6.\" modification, are permitted provided that the following conditions
7.\" are met:
8.\"
9.\" 1. Redistributions of source code must retain the above copyright
10.\"    notice, this list of conditions and the following disclaimer.
11.\"
12.\" 2. Redistributions in binary form must reproduce the above copyright
13.\"    notice, this list of conditions and the following disclaimer in the
14.\"    documentation and/or other materials provided with the distribution.
15.\"
16.\" 3. Neither the name of the Institute nor the names of its contributors
17.\"    may be used to endorse or promote products derived from this software
18.\"    without specific prior written permission.
19.\"
20.\" THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
21.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
24.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30.\" SUCH DAMAGE.
31.\"
32.\" $Id: klist.1 20458 2007-04-19 20:41:27Z lha $
33.\"
34.Dd October  6, 2005
35.Dt KLIST 1
36.Os HEIMDAL
37.Sh NAME
38.Nm klist
39.Nd list Kerberos credentials
40.Sh SYNOPSIS
41.Nm
42.Bk -words
43.Oo Fl c Ar cache \*(Ba Xo
44.Fl -cache= Ns Ar cache
45.Xc
46.Oc
47.Op Fl s | Fl t | Fl -test
48.Op Fl T | Fl -tokens
49.Op Fl 5 | Fl -v5
50.Op Fl v | Fl -verbose
51.Op Fl l | Fl -list-caches
52.Op Fl f
53.Op Fl -version
54.Op Fl -help
55.Ek
56.Sh DESCRIPTION
57.Nm
58reads and displays the current tickets in the credential cache (also
59known as the ticket file).
60.Pp
61Options supported:
62.Bl -tag -width Ds
63.It Xo
64.Fl c Ar cache ,
65.Fl -cache= Ns Ar cache
66.Xc
67credential cache to list
68.It Xo
69.Fl s ,
70.Fl t ,
71.Fl -test
72.Xc
73Test for there being an active and valid TGT for the local realm of
74the user in the credential cache.
75.It Xo
76.Fl T ,
77.Fl -tokens
78.Xc
79display AFS tokens
80.It Xo
81.Fl 5 ,
82.Fl -v5
83.Xc
84display v5 cred cache (this is the default)
85.It Fl f
86Include ticket flags in short form, each character stands for a
87specific flag, as follows:
88.Bl -tag -width  XXX -compact -offset indent
89.It F
90forwardable
91.It f
92forwarded
93.It P
94proxiable
95.It p
96proxied
97.It D
98postdate-able
99.It d
100postdated
101.It R
102renewable
103.It I
104initial
105.It i
106invalid
107.It A
108pre-authenticated
109.It H
110hardware authenticated
111.El
112.Pp
113This information is also output with the
114.Fl -verbose
115option, but in a more verbose way.
116.It Xo
117.Fl v ,
118.Fl -verbose
119.Xc
120Verbose output. Include all possible information:
121.Bl -tag -width XXXX -offset indent
122.It Server
123the principal the ticket is for
124.It Ticket etype
125the encryption type used in the ticket, followed by the key version of
126the ticket, if it is available
127.It Session key
128the encryption type of the session key, if it's different from the
129encryption type of the ticket
130.It Auth time
131the time the authentication exchange took place
132.It Start time
133the time that this ticket is valid from (only printed if it's
134different from the auth time)
135.It End time
136when the ticket expires, if it has already expired this is also noted
137.It Renew till
138the maximum possible end time of any ticket derived from this one
139.It Ticket flags
140the flags set on the ticket
141.It Addresses
142the set of addresses from which this ticket is valid
143.El
144.It Xo
145.Fl l ,
146.Fl -list-caches
147.Xc
148List the credential caches for the current users, not all cache types
149supports listing multiple caches.
150.Pp
151.El
152.Sh SEE ALSO
153.Xr kdestroy 1 ,
154.Xr kinit 1
155