1<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN"> 2<HTML> 3<HEAD> 4<meta name="GENERATOR" content="Microsoft® HTML Help Workshop 4.1"> 5<link rel="stylesheet" type="text/css" href="Leash.css" /> 6<Title>KLIST</Title> 7</HEAD> 8<BODY> 9<H1>KLIST Command</H1> 10 11<table> 12<tr><th id="th2"> The following information reproduces the information from UNIX man page for the KLIST command.</th> 13</tr> 14</table> 15<H2>SYNOPSIS</H2> 16<table> 17<tr> 18<th id="th2">klist</th> 19<td> 20<span class="command">[<B>-e</B>] </span> 21<span class="command"> [[<B>-c</B>] [<B>-l</B>] [<B>-A</B>] [<B>-f</B>] [<B>-s</B>] [<B>-a</B> [<B>-n</B>]]] </span> 22<span class="command"> [<B>-k</B> [<B>-t</B>] [<B>-K</B>]] </span> 23<span class="command"> [<I>cache</I><B>_</B><I>name</I> | <I>keytab</I><B>_</B><I>name</I>] </span> 24</td> 25</tr> 26</table> 27 28<H2>DESCRIPTION</H2> 29<p> 30 <span class="command"> <em>klist</em></span> lists the Kerberos principal and Kerberos tickets held in a credentials cache, or the keys held in a <B>keytab</B> file. 31</p> 32 33<H2>OPTIONS</H2> 34 35<table> 36<tr> 37<th id="th2"><span class="command"> <B>-e</B> </span></th> 38<td> Displays the encryption types of the session key and the ticket 39 for each credential in the credential cache, or each key in the 40 keytab file. 41</td> 42</tr> 43<tr> 44<th id="th2"><span class="command"> <B>-c</B> </span></th> 45<td> List tickets held in a credentials cache. This is the default 46 if neither <B>-c</B> nor <B>-k</B> is specified. 47</td> 48</tr> 49<tr> 50<th id="th2"><span class="command"> <B>-l</B> </span></th> 51<td> If a cache collection is available, displays a table summarizing 52 the caches present in the collection. 53</td> 54</tr> 55<tr> 56<th id="th2"><span class="command"> <B>-A  </B> </span></th> 57<td> If a cache collection is available, displays the contents of all 58 of the caches in the collection. 59</td> 60</tr> 61<tr> 62<th id="th2"><span class="command"> <B>-f</B> </span></th> 63<td> Shows the flags present in the credentials, using the following 64 abbreviations: 65<table class="noborder" > 66 67 <tr><td> F</td><td><B>F</B>orwardable </td></tr> 68 <tr><td> f</td><td><B>f</B>orwarded </td></tr> 69 <tr><td> P</td><td><B>P</B>roxiable</td></tr> 70 <tr><td> p</td><td><B>p</B>roxy</td></tr> 71 <tr><td> D</td><td>post<B>D</B>ateable</td></tr> 72 <tr><td> d</td><td> post<B>d</B>ated</td></tr> 73 <tr><td> R</td><td><B>R</B>enewable</td></tr> 74 <tr><td> I</td><td><B>I</B>nitial</td></tr> 75 <tr><td> i</td><td><B>i</B>nvalid</td></tr> 76 <tr><td> H</td><td><B>H</B>ardware authenticated</td></tr> 77 <tr><td> A </td><td>pre<B>A</B>uthenticated</td></tr> 78 <tr><td> T</td><td><B>T</B>ransit policy checked</td></tr> 79 <tr><td> O</td><td><B>O</B>kay as delegate</td></tr> 80 <tr><td> a</td><td><B>a</B>nonymous</td></tr> 81</table> 82</td> 83</tr> 84<tr> 85<th id="th2"><span class="command"> <B>-s</B> </span></th> 86<td> Causes <B>klist</B> to run silently (produce no output), but to still 87 set the exit status according to whether it finds the credentials 88 cache. The exit status is `0' if <B>klist</B> finds a credentials 89 cache, and `1' if it does not or if the tickets are 90 expired. 91</td> 92</tr> 93<tr> 94<th id="th2"><span class="command"> <B>-a</B> </span></th> 95<td>Display list of addresses in credentials. 96</td> 97</tr> 98<tr> 99<th id="th2"><span class="command"> <B>-n</B> </span></th> 100<td>Show numeric addresses instead of reverse-resolving addresses. 101</td> 102</tr> 103<tr> 104<th id="th2"><span class="command"> <B>-k</B> </span></th> 105<td>List keys held in a <B>keytab</B> file. 106</td> 107</tr> 108 109 </table> 110 111 112<H2>ENVIRONMENT</H2> 113<p> <B>Klist</B> uses the following environment variables:</p> 114<table> 115<tr> 116<th id="th2"> KRB5CCNAME</th> 117<td> Location of the default Kerberos 5 credentials (ticket) 118 cache, in the form <I>type</I>:<I>residual</I>. If no type prefix is 119 present, the <B>FILE</B> type is assumed. The type of the 120 default cache may determine the availability of a cache 121 collection; for instance, a default cache of type <B>DIR</B> 122 causes caches within the directory to be present in the 123 collection. </td> 124</tr> 125</table> 126 127<H2>FILES</H2> 128<table> 129<tr> 130 <th id="th2"> <span class="command"> /tmp/krb5cc_[uid] </span></th> 131<td> default location of Kerberos 5 credentials cache ([uid] is the decimal UID of the user). </td></tr> 132<tr> 133 <th id="th2"> <span class="command"> /etc/krb5.keytab </span></th> 134<td> default location for the local host's <B>keytab</B> file.</td></tr> 135</table> 136 137<H2>SEE ALSO</H2> 138<ul id="helpul"> 139<li><a href="HTML/KINIT.htm"><B>kinit(1)</B></a> </li> 140<li><a href="HTML/KDESTROY.htm"><B>kdestroy(1)</B></a></li> 141<li><B>krb5(3)</B></li> 142 143<PRE> 144 145 <B>KLIST(1)</B> 146 147</PRE> 148</BODY> 149</HTML> 150