This manual page is for Mac OS X version 10.6

If you are running a different version of Mac OS X, view the documentation locally:

  • In Terminal, using the man(1) command

Reading manual pages

Manual pages are intended as a quick reference for people who already understand a technology.

  • For more information about the manual page format, see the manual page for manpages(5).

  • For more information about this technology, look for other documentation in the Apple Reference Library.

  • For general information about writing shell scripts, read Shell Scripting Primer.


KLIST(1)                                                                                            KLIST(1)



NAME
       klist - list cached Kerberos tickets

SYNOPSIS
       klist [-5] [-4] [-e] [[-c] [-A] [-f] [-s] [-a  [-n]]] [-k [-t] [-K]] [cache_name | keytab_name]

DESCRIPTION
       Klist lists the Kerberos principal and Kerberos tickets held in a credentials cache, or the keys held
       in a keytab file.

OPTIONS
       -5     list Kerberos 5 credentials.  This option will not list Kerberos 4 credentials  unless  -4  is
              also specified.

       -4     list  Kerberos  4  credentials.  This option will not list Kerberos 5 credentials unless -5 is
              also specified.

       -e     displays the encryption types of the session key and the ticket for  each  credential  in  the
              credential cache, or each key in the keytab file.

       -c     List  tickets held in a credentials cache.  This is the default if neither -c nor -k is speci-fied. specified.
              fied.

       -A     lists all caches in the credentials cache.

       -f     shows the flags present in the credentials, using the following abbreviations:

                   F    Forwardable
                   f    forwarded
                   P    Proxiable
                   p    proxy
                   D    postDateable
                   d    postdated
                   R    Renewable
                   I    Initial
                   i    invalid
                   H    Hardware authenticated
                   A    preAuthenticated
                   O    OK as delegate
                   a    anonymous


       -s     causes klist to run silently (produce no output), but to still set the exit  status  according
              to  whether  it  finds the credentials cache.  The exit status is '0' if klist finds a creden-tials credentials
              tials cache, with a valid ticket granting ticket and '1' if it does not.

       -a     display list of addresses in credentials.

       -n     show numeric addresses instead of reverse-resolving addresses.

       -k     List keys held in a keytab file.

       -t     display the time entry timestamps for each keytab entry in the keytab file.

       -K     display the value of the encryption key in each keytab entry in the keytab file.

       If cache_name or keytab_name is not specified, klist will  display  the  credentials  in  the  system
       default credentials cache or keytab file as appropriate.

FILES
       /etc/krb5.keytab
              default location for the local host's keytab file.

SEE ALSO
       kinit(1), kdestroy(1), kpasswd(1), kswitch(1)



                                                                                                    KLIST(1)

Reporting Problems

The way to report a problem with this manual page depends on the type of problem:

Content errors
Report errors in the content of this documentation with the feedback links below.
Bug reports
Report bugs in the functionality of the described tool or API through Bug Reporter.
Formatting problems
Report formatting mistakes in the online version of these pages with the feedback links below.