4
4
<!-- Manpage converted by man2html 3.0.1 -->
8
klist - list cached Kerberos tickets
12
7
<H2>SYNOPSIS</H2><PRE>
13
<B>klist</B> [<B>-e</B>] [[<B>-c</B>] [<B>-f</B>] [<B>-s</B>] [<B>-a</B> [<B>-n</B>]]] [<B>-k</B> [<B>-t</B>] [<B>-K</B>]]
14
[<I>cache</I>_<I>name</I> | <I>keytab</I>_<I>name</I>]
8
<B>klist</B> [<B>-e</B>] [[<B>-c</B>] [<B>-l</B>] [<B>-A</B>] [<B>-f</B>] [<B>-s</B>] [<B>-a</B> [<B>-n</B>]]] [<B>-k</B> [<B>-t</B>] [<B>-K</B>]]
9
[<I>cache</I><B>_</B><I>name</I> | <I>keytab</I><B>_</B><I>name</I>]
18
13
<H2>DESCRIPTION</H2><PRE>
19
<I>Klist</I> lists the Kerberos principal and Kerberos tickets held
20
in a credentials cache, or the keys held in a <B>keytab</B> file.
14
<I>Klist</I> lists the Kerberos principal and Kerberos tickets held in a cre‐
15
dentials cache, or the keys held in a <B>keytab</B> file.
24
19
<H2>OPTIONS</H2><PRE>
25
-<B>e</B> displays the encryption types of the session key and
26
the ticket for each credential in the credential cache,
27
or each key in the keytab file.
29
-<B>c</B> List tickets held in a credentials cache. This is the
30
default if neither -<B>c</B> nor -<B>k</B> is specified.
32
-<B>f</B> shows the flags present in the credentials, using the
33
following abbreviations:
44
H <B>H</B>ardware authenticated
45
A pre<B>A</B>uthenticated
46
T <B>T</B>ransit policy checked
47
O <B>O</B>kay as delegate
50
-<B>s</B> causes <B>klist</B> to run silently (produce no output), but
51
to still set the exit status according to whether it
52
finds the credentials cache. The exit status is `0' if
53
<B>klist</B> finds a credentials cache, and `1' if it does not
57
-<B>a</B> display list of addresses in credentials.
59
-<B>n</B> show numeric addresses instead of reverse-resolving
62
<B>-k</B> List keys held in a <B>keytab</B> file.
64
-<B>t</B> display the time entry timestamps for each keytab entry
67
-<B>K</B> display the value of the encryption key in each keytab
68
entry in the keytab file.
70
If <I>cache</I>_<I>name</I> or <I>keytab</I>_<I>name</I> is not specified, klist will
71
display the credentials in the default credentials cache or
72
keytab file as appropriate. If the <B>KRB5CCNAME</B> environment
73
variable is set, its value is used to name the default
78
<H2>ENVIRONMENT</H2><PRE>
79
<B>Klist</B> uses the following environment variables:
81
KRB5CCNAME Location of the Kerberos 5 credentials
20
<B>-e</B> displays the encryption types of the session key and the ticket
21
for each credential in the credential cache, or each key in the
24
<B>-c</B> List tickets held in a credentials cache. This is the default
25
if neither <B>-c</B> nor <B>-k</B> is specified.
27
<B>-l</B> If a cache collection is available, displays a table summarizing
28
the caches present in the collection.
30
<B>-A</B> If a cache collection is available, displays the contents of all
31
of the caches in the collection.
33
<B>-f</B> shows the flags present in the credentials, using the following
45
H <B>H</B>ardware authenticated
46
A pre<B>A</B>uthenticated
47
T <B>T</B>ransit policy checked
48
O <B>O</B>kay as delegate
51
<B>-s</B> causes <B>klist</B> to run silently (produce no output), but to still
52
set the exit status according to whether it finds the creden‐
53
tials cache. The exit status is `0' if <B>klist</B> finds a creden‐
54
tials cache, and `1' if it does not or if the tickets are
57
<B>-a</B> display list of addresses in credentials.
59
<B>-n</B> show numeric addresses instead of reverse-resolving addresses.
61
<B>-k</B> List keys held in a <B>keytab</B> file.
63
<B>Klist</B> uses the following environment variables:
65
KRB5CCNAME Location of the default Kerberos 5 credentials (ticket)
66
cache, in the form <I>type</I>:<I>residual</I>. If no type prefix is
67
present, the <B>FILE</B> type is assumed. The type of the
68
default cache may determine the availability of a cache
69
collection; for instance, a default cache of type <B>DIR</B>
70
causes caches within the directory to be present in the
86
75
<H2>FILES</H2><PRE>
87
/tmp/krb5cc_[uid] default location of Kerberos 5 creden-
88
tials cache ([uid] is the decimal UID of
76
/tmp/krb5cc_[uid] default location of Kerberos 5 credentials cache
77
([uid] is the decimal UID of the user).
91
/etc/krb5.keytab default location for the local host's
79
/etc/krb5.keytab default location for the local host's <B>keytab</B> file.
96
83
<H2>SEE ALSO</H2><PRE>
97
<B>kinit(1)</B>, <B>kdestroy(1)</B>, <B>krb5(3)</B>
84
<B>kinit(1)</B>, <B>kdestroy(1)</B>, <B>krb5(3)</B>