EVOLUTION-MANAGER

Edit File: kinit.1

.\" Automatically generated by Pandoc 2.3.1 .\" .TH "KINIT" "1" "2023" "JDK 17.0.8" "JDK Commands" .hy .SH NAME .PP kinit \- obtain and cache Kerberos ticket\-granting tickets .SH SYNOPSIS .PP Initial ticket request: .PP \f[CB]kinit\f[R] [\f[CB]\-A\f[R]] [\f[CB]\-f\f[R]] [\f[CB]\-p\f[R]] [\f[CB]\-c\f[R] \f[I]cache_name\f[R]] [\f[CB]\-l\f[R] \f[I]lifetime\f[R]] [\f[CB]\-r\f[R] \f[I]renewable_time\f[R]] [[\f[CB]\-k\f[R] [\f[CB]\-t\f[R] \f[I]keytab_file_name\f[R]]] [\f[I]principal\f[R]] [\f[I]password\f[R]] .PP Renew a ticket: .PP \f[CB]kinit\f[R] \f[CB]\-R\f[R] [\f[CB]\-c\f[R] \f[I]cache_name\f[R]] [\f[I]principal\f[R]] .SH DESCRIPTION .PP This tool is similar in functionality to the \f[CB]kinit\f[R] tool that is commonly found in other Kerberos implementations, such as SEAM and MIT Reference implementations. The user must be registered as a principal with the Key Distribution Center (KDC) prior to running \f[CB]kinit\f[R]. .PP By default, on Windows, a cache file named \f[I]USER_HOME\f[R]\f[CB]\\krb5cc_\f[R]\f[I]USER_NAME\f[R] is generated. .PP The identifier \f[I]USER_HOME\f[R] is obtained from the \f[CB]java.lang.System\f[R] property \f[CB]user.home\f[R]. \f[I]USER_NAME\f[R] is obtained from the \f[CB]java.lang.System\f[R] property \f[CB]user.name\f[R]. If \f[I]USER_HOME\f[R] is null, the cache file is stored in the current directory from which the program is running. \f[I]USER_NAME\f[R] is the operating system\[aq]s login user name. This user name could be different than the user\[aq]s principal name. For example, on Windows, the cache file could be \f[CB]C:\\Windows\\Users\\duke\\krb5cc_duke\f[R], in which \f[CB]duke\f[R] is the \f[I]USER_NAME\f[R] and \f[CB]C:\\Windows\\Users\\duke\f[R] is the \f[I]USER_HOME\f[R]. .PP By default, the keytab name is retrieved from the Kerberos configuration file. If the keytab name isn\[aq]t specified in the Kerberos configuration file, the kinit tool assumes that the name is \f[I]USER_HOME\f[R]\f[CB]\\krb5.keytab\f[R] .PP If you don\[aq]t specify the password using the \f[I]password\f[R] option on the command line, the \f[CB]kinit\f[R] tool prompts you for the password. .PP \f[B]Note:\f[R] .PP The \f[CB]password\f[R] option is provided only for testing purposes. Don\[aq]t specify your password in a script or provide your password on the command line. Doing so will compromise your password. .SH COMMANDS .PP You can specify one of the following commands. After the command, specify the options for it. .TP .B \f[CB]\-A\f[R] Doesn\[aq]t include addresses. .RS .RE .TP .B \f[CB]\-f\f[R] Issues a forwardable ticket. .RS .RE .TP .B \f[CB]\-p\f[R] Issues a proxiable ticket. .RS .RE .TP .B \f[CB]\-c\f[R] \f[I]cache_name\f[R] The cache name (for example, \f[CB]FILE:D:\\temp\\mykrb5cc\f[R]). .RS .RE .TP .B \f[CB]\-l\f[R] \f[I]lifetime\f[R] Sets the lifetime of a ticket. The value can be one of "h:m[:s]", "NdNhNmNs", and "N". See the \f[B]MIT krb5 Time Duration definition\f[R] [http://web.mit.edu/kerberos/krb5\-1.17/doc/basic/date_format.html#duration] for more information. .RS .RE .TP .B \f[CB]\-r\f[R] \f[I]renewable_time\f[R] Sets the total lifetime that a ticket can be renewed. .RS .RE .TP .B \f[CB]\-R\f[R] Renews a ticket. .RS .RE .TP .B \f[CB]\-k\f[R] Uses keytab .RS .RE .TP .B \f[CB]\-t\f[R] \f[I]keytab_filename\f[R] The keytab name (for example, \f[CB]D:\\winnt\\profiles\\duke\\krb5.keytab\f[R]). .RS .RE .TP .B \f[I]principal\f[R] The principal name (for example, \f[CB]duke\@example.com\f[R]). .RS .RE .TP .B \f[I]password\f[R] The \f[I]principal\f[R]\[aq]s Kerberos password. \f[B]Don\[aq]t specify this on the command line or in a script.\f[R] .RS .RE .PP Run \f[CB]kinit\ \-help\f[R] to display the instructions above. .SH EXAMPLES .PP Requests credentials valid for authentication from the current client host, for the default services, storing the credentials cache in the default location (\f[CB]C:\\Windows\\Users\\duke\\krb5cc_duke\f[R]): .RS .PP \f[CB]kinit\ duke\@example.com\f[R] .RE .PP Requests proxiable credentials for a different principal and store these credentials in a specified file cache: .RS .PP \f[CB]kinit\ \-l\ 1h\ \-r\ 10h\ duke\@example.com\f[R] .RE .PP Requests a TGT for the specified principal that will expire in 1 hour but is renewable for up to 10 hours. Users must renew a ticket before it has expired. The renewed ticket can be renewed repeatedly within 10 hours from its initial request. .RS .PP \f[CB]kinit\ \-R\ duke\@example.com\f[R] .RE .PP Renews an existing renewable TGT for the specified principal. .RS .PP \f[CB]kinit\ \-p\ \-c\ FILE:C:\\Windows\\Users\\duke\\credentials\\krb5cc_cafebeef\ cafebeef\@example.com\f[R] .RE .PP Requests proxiable and forwardable credentials for a different principal and stores these credentials in a specified file cache: .RS .PP \f[CB]kinit\ \-f\ \-p\ \-c\ FILE:C:\\Windows\\Users\\duke\\credentials\\krb5cc_cafebeef\ cafebeef\@example.com\f[R] .RE .PP Displays the help menu for the \f[CB]kinit\f[R] tool: .RS .PP \f[CB]kinit\ \-help\f[R] .RE