User Commands                                            klist(1)

NAME
     klist - list currently held Kerberos tickets

SYNOPSIS
     /usr/bin/klist [ -e ]  [  [ -c ]  [ cache_name ]  [ -f ]   [
     -s ]  ]  [  -k  [ -t ]  [ keytab_file ]  [ -K ]  ]

DESCRIPTION
     The klist utility prints the name of the credentials  cache,
     the  identity  of the principal that the tickets are for (as
     listed in the ticket file), and the principal names  of  all
     Kerberos  tickets currently held by the user, along with the
     issue and expiration time for each authenticator.  Principal
     names  are  listed in the form name/instance@realm, with the
     '/' omitted if the instance is not  included,  and  the  '@'
     omitted if the realm is  not included.

     If cache_file or keytab_name is not  specified,  klist  will
     display  the credentials in the default credentials cache or
     keytab files as appropriate.  By default your ticket will be
     stored in the file /tmp/krb5cc_uid, where uid is the current
     user-ID of the user.

OPTIONS
     The following options are supported:

     -e    Displays the encryption types of the session  key  and
           the  ticket  for  each  credential  in  the credential
           cache, or each key in the keytab file.

     -c [cache_name]
           Lists tickets held in a credentials cache. This is the
           default if neither -c nor -k is specified.

     -f    Shows the flags present in the credentials, using  the
           following abbreviations:

           F     Forwardable

           f     forwarded

           P     Proxiable

           p     proxy

           D     postDateable

           d     postdated

           R     Renewable

SunOS 5.8           Last change: 17 Nov 1999                    1

User Commands                                            klist(1)

           I     Initial

           i     invalid

     -s    Causes klist to run silently (produce no output),  but
           to  still  set the exit status according to whether it
           finds the credentials cache. The exit status is  `  0'
           if  klist  finds  a  credentials cache, and ` 1' if it
           does not.

     -k [keytab_file]
           List keys held in a keytab file.

     -t    Displays the time entry  timestamps  for  each  keytab
           entry in the keytab file.

     -K    Displays the value of the encryption key in each  key-
           tab entry in the keytab file.

ENVIRONMENT VARIABLES
     klist uses the following environment variable:

     KRB5CCNAME
           Location of the credentials (ticket) cache.

FILES
     /tmp/krb5cc_uid
           Default credentials cache (uid is the decimal  UID  of
           the user).

     /etc/krb5/krb5.keytab
           Default location for the local host's keytab file.

ATTRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:

     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | Availability                | SUNWcsu                     |
    |_____________________________|_____________________________|

SEE ALSO
     kdestroy(1), kinit(1), attributes(5), SEAM(5)

BUGS
     When reading a file as a service key file, very little error
     checking is performed.

SunOS 5.8           Last change: 17 Nov 1999                    2