kinit.1 revision 65310
$Id: kinit.1,v 1.4 2000/02/01 14:12:13 joda Exp $
.Dd May 29, 1998 .Dt KINIT 1 .Os HEIMDAL .Sh NAME .Nm kinit , .Nm kauth .Nd acquire initial tickets .Sh SYNOPSIS .Nm kinit .Op Fl 4 .Op Fl -524init .Op Fl -afslog .Op Fl c Ar cachename .Op Fl -cache= Ns Ar cachename .Op Fl c Ar cachename .Op Fl -cache= Ns Ar cachename .Op Fl f .Op Fl -forwardable .Op Fl t Ar keytabname .Op Fl -keytab= Ns Ar keytabname .Op Fl l Ar seconds .Op Fl -lifetime= Ns Ar seconds .Op Fl p .Op Fl -proxiable .Op Fl R .Op Fl -renew .Op Fl -renewable .Op Fl r Ar seconds .Op Fl -renewable-life= Ns Ar seconds .Op Fl S Ar principal .Op Fl -server= Ns Ar principal .Op Fl s Ar seconds .Op Fl -start-time= Ns Ar seconds .Op Fl k .Op Fl -use-keytab .Op Fl v .Op Fl -validate .Op Fl e .Op Fl -enctypes= Ns Ar enctypes .Op Fl -fcache-version= Ns Ar version .Op Fl -no-addresses .Op Fl -version .Op Fl -help .Op Ar principal .Sh DESCRIPTION .Nm is used to authenticate to the kerberos server as .Ar principal , or if none is given, a system generated default, and acquire a ticket granting ticket that can later be used to obtain tickets for other services. Supported options: l -tag -width Ds t Xo .Fl c Ar cachename .Fl -cache= Ns Ar cachename .Xc The credentials cache to put the acquired ticket in, if other than default. t Xo .Fl f Ns , .Fl -forwardable .Xc Get ticket that can be forwarded to another host. t Xo .Fl t Ar keytabname Ns , .Fl -keytab= Ns Ar keytabname .Xc Don't ask for a password, but instead get the key from the specified keytab. t Xo .Fl l Ar seconds Ns , .Fl -lifetime= Ns Ar seconds .Xc Specifies the lifetime of the ticket. t Xo .Fl p Ns , .Fl -proxiable .Xc Request tickets with the proxiable flag set. t Xo .Fl R Ns , .Fl -renew .Xc Try to renew ticket. The ticket must have the .Sq renewable flag set, and must not be expired. t Fl -renewable The same as .Fl -renewable-life , with an infinite time. t Xo .Fl r Ar seconds Ns , .Fl -renewable-life= Ns Ar seconds .Xc The max renewable ticket life. t Xo .Fl S Ar principal Ns , .Fl -server= Ns Ar principal .Xc Get a ticket for a service other than krbtgt/LOCAL.REALM. t Xo .Fl s Ar seconds Ns , .Fl -start-time= Ns Ar seconds .Xc Start time of ticket, if other than the current time. t Xo .Fl k Ns , .Fl -use-keytab .Xc The same as .Fl -keytab , but with the default keytab name (normally .Ar FILE:/etc/krb5.keytab ) . t Xo .Fl v Ns , .Fl -validate .Xc Try to validate an invalid ticket. t Xo .Fl e , .Fl -enctypes= Ns Ar enctypes .Xc Request tickets with this particular enctype. t Xo .Fl -fcache-version= Ns Ar version .Xc Create a credentials cache of version .Nm version . t Xo .Fl -no-addresses .Xc Request a ticket with no addresses. .El The following options are only available if .Nm has been compiled with support for Kerberos 4. The .Nm kauth program is identical to .Nm kinit , but has these options enabled by default. l -tag -width Ds t Xo .Fl 4 Ns , .Fl -524init .Xc Try to convert the obtained krbtgt to a version 4 compatible ticket. It will store this ticket in the default Kerberos 4 ticket file. t Fl -afslog Gets AFS tickets, converts them to version 4 format, and stores them in the kernel. Only useful if you have AFS. .El .Sh ENVIRONMENT l -tag -width Ds t Ev KRB5CCNAME Specifies the default cache file. t Ev KRB5_CONFIG The directory where the
.Dd May 29, 1998 .Dt KINIT 1 .Os HEIMDAL .Sh NAME .Nm kinit , .Nm kauth .Nd acquire initial tickets .Sh SYNOPSIS .Nm kinit .Op Fl 4 .Op Fl -524init .Op Fl -afslog .Op Fl c Ar cachename .Op Fl -cache= Ns Ar cachename .Op Fl c Ar cachename .Op Fl -cache= Ns Ar cachename .Op Fl f .Op Fl -forwardable .Op Fl t Ar keytabname .Op Fl -keytab= Ns Ar keytabname .Op Fl l Ar seconds .Op Fl -lifetime= Ns Ar seconds .Op Fl p .Op Fl -proxiable .Op Fl R .Op Fl -renew .Op Fl -renewable .Op Fl r Ar seconds .Op Fl -renewable-life= Ns Ar seconds .Op Fl S Ar principal .Op Fl -server= Ns Ar principal .Op Fl s Ar seconds .Op Fl -start-time= Ns Ar seconds .Op Fl k .Op Fl -use-keytab .Op Fl v .Op Fl -validate .Op Fl e .Op Fl -enctypes= Ns Ar enctypes .Op Fl -fcache-version= Ns Ar version .Op Fl -no-addresses .Op Fl -version .Op Fl -help .Op Ar principal .Sh DESCRIPTION .Nm is used to authenticate to the kerberos server as .Ar principal , or if none is given, a system generated default, and acquire a ticket granting ticket that can later be used to obtain tickets for other services. Supported options: l -tag -width Ds t Xo .Fl c Ar cachename .Fl -cache= Ns Ar cachename .Xc The credentials cache to put the acquired ticket in, if other than default. t Xo .Fl f Ns , .Fl -forwardable .Xc Get ticket that can be forwarded to another host. t Xo .Fl t Ar keytabname Ns , .Fl -keytab= Ns Ar keytabname .Xc Don't ask for a password, but instead get the key from the specified keytab. t Xo .Fl l Ar seconds Ns , .Fl -lifetime= Ns Ar seconds .Xc Specifies the lifetime of the ticket. t Xo .Fl p Ns , .Fl -proxiable .Xc Request tickets with the proxiable flag set. t Xo .Fl R Ns , .Fl -renew .Xc Try to renew ticket. The ticket must have the .Sq renewable flag set, and must not be expired. t Fl -renewable The same as .Fl -renewable-life , with an infinite time. t Xo .Fl r Ar seconds Ns , .Fl -renewable-life= Ns Ar seconds .Xc The max renewable ticket life. t Xo .Fl S Ar principal Ns , .Fl -server= Ns Ar principal .Xc Get a ticket for a service other than krbtgt/LOCAL.REALM. t Xo .Fl s Ar seconds Ns , .Fl -start-time= Ns Ar seconds .Xc Start time of ticket, if other than the current time. t Xo .Fl k Ns , .Fl -use-keytab .Xc The same as .Fl -keytab , but with the default keytab name (normally .Ar FILE:/etc/krb5.keytab ) . t Xo .Fl v Ns , .Fl -validate .Xc Try to validate an invalid ticket. t Xo .Fl e , .Fl -enctypes= Ns Ar enctypes .Xc Request tickets with this particular enctype. t Xo .Fl -fcache-version= Ns Ar version .Xc Create a credentials cache of version .Nm version . t Xo .Fl -no-addresses .Xc Request a ticket with no addresses. .El The following options are only available if .Nm has been compiled with support for Kerberos 4. The .Nm kauth program is identical to .Nm kinit , but has these options enabled by default. l -tag -width Ds t Xo .Fl 4 Ns , .Fl -524init .Xc Try to convert the obtained krbtgt to a version 4 compatible ticket. It will store this ticket in the default Kerberos 4 ticket file. t Fl -afslog Gets AFS tickets, converts them to version 4 format, and stores them in the kernel. Only useful if you have AFS. .El .Sh ENVIRONMENT l -tag -width Ds t Ev KRB5CCNAME Specifies the default cache file. t Ev KRB5_CONFIG The directory where the
a krb5.conf can be found, default is
a /etc .
t Ev KRBTKFILE Specifies the Kerberos 4 ticket file to store version 4 tickets in.
.El
.Sh FILES
.Sh EXAMPLES
.Sh DIAGNOSTICS
.Sh SEE ALSO
.Xr krb5.conf 5 ,
.Xr klist 1 ,
.Xr kdestroy 1
.Sh STANDARDS
.Sh HISTORY
.Sh AUTHORS
.Sh BUGS