1*7f2fe78bSCy Schubert<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN"> 2*7f2fe78bSCy Schubert<HTML> 3*7f2fe78bSCy Schubert<HEAD> 4*7f2fe78bSCy Schubert<meta name="GENERATOR" content="Microsoft® HTML Help Workshop 4.1"> 5*7f2fe78bSCy Schubert<link rel="stylesheet" type="text/css" href="Leash.css" /> 6*7f2fe78bSCy Schubert<Title>KVNO</Title> 7*7f2fe78bSCy Schubert</HEAD> 8*7f2fe78bSCy Schubert<BODY> 9*7f2fe78bSCy Schubert<H1>KVNO Command</H1> 10*7f2fe78bSCy Schubert 11*7f2fe78bSCy Schubert<table> 12*7f2fe78bSCy Schubert<tr><th id="th2"> The following information reproduces the information from UNIX man page for the KVNO command.</th> 13*7f2fe78bSCy Schubert</tr> 14*7f2fe78bSCy Schubert</table> 15*7f2fe78bSCy Schubert<H2>SYNOPSIS</H2> 16*7f2fe78bSCy Schubert<table> 17*7f2fe78bSCy Schubert<tr> 18*7f2fe78bSCy Schubert<th id="th2">kvno </th> 19*7f2fe78bSCy Schubert<td> 20*7f2fe78bSCy Schubert<span class="command">[<strong>-c</strong> <em>ccache</em>]</span> 21*7f2fe78bSCy Schubert<span class="command">[<strong>-e</strong> <em>etype</em>]</span> 22*7f2fe78bSCy Schubert<span class="command">[<strong>-q</strong>]</span> 23*7f2fe78bSCy Schubert<span class="command">[<strong>-h</strong>]</span> 24*7f2fe78bSCy Schubert<span class="command">[<strong>-P</strong>]</span> 25*7f2fe78bSCy Schubert<span class="command">[<strong>-S</strong> <em>sname</em>]</span> 26*7f2fe78bSCy Schubert<span class="command">[<strong>-U</strong> <em>for_user</em>]</span> 27*7f2fe78bSCy Schubert<span class="command"><em>service1 service2</em> ..</span> 28*7f2fe78bSCy Schubert</td> 29*7f2fe78bSCy Schubert</tr> 30*7f2fe78bSCy Schubert</table> 31*7f2fe78bSCy Schubert 32*7f2fe78bSCy Schubert<H2>DESCRIPTION</H2> 33*7f2fe78bSCy Schubert<p> 34*7f2fe78bSCy Schubert <span class="command"> <em>kvno </em></span> acquires a service ticket for the specified Kerberos principals and prints out the key version numbers of each.</p> 35*7f2fe78bSCy Schubert 36*7f2fe78bSCy Schubert 37*7f2fe78bSCy Schubert<H2>OPTIONS</H2> 38*7f2fe78bSCy Schubert 39*7f2fe78bSCy Schubert 40*7f2fe78bSCy Schubert<table> 41*7f2fe78bSCy Schubert<tr> 42*7f2fe78bSCy Schubert<th id="th2"><span class="command"><strong>-c</strong> <em>ccache</em></span></th> 43*7f2fe78bSCy Schubert<td> Specifies the name of a credentials cache to use (if not the default). 44*7f2fe78bSCy Schubert</td> 45*7f2fe78bSCy Schubert</tr> 46*7f2fe78bSCy Schubert<tr> 47*7f2fe78bSCy Schubert<th id="th2"><span class="command"><strong>-e</strong> <em>etype</em></span></th> 48*7f2fe78bSCy Schubert<td> Specifies the enctype which will be requested for the session key of all the services named on the command line. This is useful in certain backward compatibility situations. 49*7f2fe78bSCy Schubert</td> 50*7f2fe78bSCy Schubert</tr> 51*7f2fe78bSCy Schubert<tr> 52*7f2fe78bSCy Schubert<th id="th2"><span class="command"><strong>-q</strong></span></th> 53*7f2fe78bSCy Schubert<td> Suppress printing output when successful. If a service ticket cannot be obtained, an error message will still be printed and kvno will exit with nonzero status. 54*7f2fe78bSCy Schubert</td> 55*7f2fe78bSCy Schubert</tr> 56*7f2fe78bSCy Schubert<tr> 57*7f2fe78bSCy Schubert<th id="th2"><span class="command"><strong>-h</strong></span></th> 58*7f2fe78bSCy Schubert<td> Prints a usage statement and exits. 59*7f2fe78bSCy Schubert</td> 60*7f2fe78bSCy Schubert</tr> 61*7f2fe78bSCy Schubert<tr> 62*7f2fe78bSCy Schubert<th id="th2"><span class="command"><strong>-P</strong></span></th> 63*7f2fe78bSCy Schubert<td> Specifies that the <em>service1 service2</em> ... arguments are to be treated as services for which credentials should be acquired using constrained delegation. This option is only valid when used in conjunction with protocol transition. 64*7f2fe78bSCy Schubert</td> 65*7f2fe78bSCy Schubert</tr> 66*7f2fe78bSCy Schubert<tr> 67*7f2fe78bSCy Schubert<th id="th2"><span class="command"><strong>-S</strong> <em>sname</em></span></th> 68*7f2fe78bSCy Schubert<td> Specifies that the <em>service1 service2</em> ... arguments are interpreted as hostnames, and the service principals are to be constructed from those hostnames and the service name <em>sname</em>. The service hostnames will be canonicalized according to the usual rules for constructing service principals. 69*7f2fe78bSCy Schubert</td> 70*7f2fe78bSCy Schubert</tr> 71*7f2fe78bSCy Schubert<tr> 72*7f2fe78bSCy Schubert<th id="th2"><span class="command"><strong>-U</strong> <em>for_user</em></span></th> 73*7f2fe78bSCy Schubert<td> Specifies that protocol transition (S4U2Self) is to be used to acquire a ticket on behalf of <em>for_user.</em> If constrained delegation is not requested, the service name must match the credentials cache client principal. 74*7f2fe78bSCy Schubert</td> 75*7f2fe78bSCy Schubert</tr> 76*7f2fe78bSCy Schubert 77*7f2fe78bSCy Schubert </table> 78*7f2fe78bSCy Schubert 79*7f2fe78bSCy Schubert 80*7f2fe78bSCy Schubert<H2>ENVIRONMENT</H2> 81*7f2fe78bSCy Schubert<p> <B>Kvno</B> uses the following environment variables:</p> 82*7f2fe78bSCy Schubert<table> 83*7f2fe78bSCy Schubert<tr> 84*7f2fe78bSCy Schubert<th id="th2"> KRB5CCNAME</th> 85*7f2fe78bSCy Schubert<td> Location of the credentials (ticket) cache. </td> 86*7f2fe78bSCy Schubert</tr> 87*7f2fe78bSCy Schubert</table> 88*7f2fe78bSCy Schubert 89*7f2fe78bSCy Schubert<H2>FILES</H2> 90*7f2fe78bSCy Schubert<table> 91*7f2fe78bSCy Schubert<tr> 92*7f2fe78bSCy Schubert <th id="th2"> <span class="command"> /tmp/krb5cc_[uid] </span></th> 93*7f2fe78bSCy Schubert<td> default location of Kerberos 5 credentials cache ([uid] is the decimal UID of the user). </td></tr> 94*7f2fe78bSCy Schubert 95*7f2fe78bSCy Schubert</table> 96*7f2fe78bSCy Schubert 97*7f2fe78bSCy Schubert<H2>SEE ALSO</H2> 98*7f2fe78bSCy Schubert<ul id="helpul"> 99*7f2fe78bSCy Schubert<li><a href="HTML/KINIT.htm"><B>kinit</B></a> </li> 100*7f2fe78bSCy Schubert<li><a href="HTML/KDESTROY.htm"><B>kdestroy</B></a></li> 101*7f2fe78bSCy Schubert</ul> 102*7f2fe78bSCy Schubert 103*7f2fe78bSCy Schubert</BODY> 104*7f2fe78bSCy Schubert</HTML> 105