kinit(TC)

Syntax

Description

The following options are supported:

-c cache

define the credentials cache pathname. The format of cache is FILE:filename. The default cache is /tmp/krb5cc_UID where UID is the decimal user ID.

-f

request a forwardable ticket.

-k [-t keytab]

read a user's key from a Kerberos V5 key table file instead of prompting for a password. By default, the system default key table, /krb5/v5srvtab, is read.

The -t option is used to specify an alternate file (keytab) to use as a key table. The format of keytab is FILE:filename. For example, the system key table file is specified as FILE:/krb5/v5srvtab.

NOTE: To use the -k option, a user must have read permission for the specified key table. Use ktadd(ADMN), ktdelete(ADMN), and ktlist(ADMN), to manipulate Kerberos V5 key tables.

-l time

expire new ticket after time amount of time. The format of time is [n1w][n2d][n3h][n4m][n5s] which specifies the number of weeks, days, hours, minutes, and seconds, for example:

3w2d4h5m6s	3 weeks 2 days 4 hours 5 minutes 6 seconds
2d6s	2 days 6 seconds

 3w2d4h5m6s   3 weeks 2 days 4 hours 5 minutes 6 seconds
 2d6s         2 days 6 seconds

-p

request a ticket by proxy.

-r time

set the maximum renewable lifetime for the ticket to be time (with the same format as for the -l option).

-v [ principal ]

select verbose mode and print the expiration time for a new ticket. The principal name argument is optional. The default principal is the current principal, or if none exists, the current login name.

Environment variables

KRB5CCNAME

alternate default cache

Files

/tmp/krb5cc_UID

default credentials cache

See also

Standards conformance