1 .\" Copyright (c) 1998 - 2003, 2006 Kungliga Tekniska Högskolan
2 .\" (Royal Institute of Technology, Stockholm, Sweden).
3 .\" All rights reserved.
5 .\" Redistribution and use in source and binary forms, with or without
6 .\" modification, are permitted provided that the following conditions
9 .\" 1. Redistributions of source code must retain the above copyright
10 .\" notice, this list of conditions and the following disclaimer.
12 .\" 2. Redistributions in binary form must reproduce the above copyright
13 .\" notice, this list of conditions and the following disclaimer in the
14 .\" documentation and/or other materials provided with the distribution.
16 .\" 3. Neither the name of the Institute nor the names of its contributors
17 .\" may be used to endorse or promote products derived from this software
18 .\" without specific prior written permission.
20 .\" THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
21 .\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 .\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 .\" ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
24 .\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 .\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 .\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 .\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 .\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
39 .Nd acquire initial tickets
43 .Oo Fl c Ar cachename \*(Ba Xo
44 .Fl -cache= Ns Ar cachename
47 .Op Fl f | Fl -forwardable
48 .Oo Fl t Ar keytabname \*(Ba Xo
49 .Fl -keytab= Ns Ar keytabname
52 .Oo Fl l Ar time \*(Ba Xo
53 .Fl -lifetime= Ns Ar time
56 .Op Fl p | Fl -proxiable
59 .Oo Fl r Ar time \*(Ba Xo
60 .Fl -renewable-life= Ns Ar time
63 .Oo Fl S Ar principal \*(Ba Xo
64 .Fl -server= Ns Ar principal
67 .Oo Fl s Ar time \*(Ba Xo
68 .Fl -start-time= Ns Ar time
71 .Op Fl k | Fl -use-keytab
72 .Op Fl v | Fl -validate
73 .Oo Fl e Ar enctypes \*(Ba Xo
74 .Fl -enctypes= Ns Ar enctypes
77 .Oo Fl a Ar addresses \*(Ba Xo
78 .Fl -extra-addresses= Ns Ar addresses
81 .Op Fl -password-file= Ns Ar filename
82 .Op Fl -fcache-version= Ns Ar version-number
83 .Op Fl A | Fl -no-addresses
87 .Op Ar principal Op Ar command
90 is used to authenticate to the Kerberos server as
92 or if none is given, a system generated default (typically your login
93 name at the default realm), and acquire a ticket granting ticket that
94 can later be used to obtain tickets for other services.
100 .Fl -cache= Ns Ar cachename
102 The credentials cache to put the acquired ticket in, if other than
108 Get ticket that can be forwarded to another host.
110 .Fl t Ar keytabname ,
111 .Fl -keytab= Ns Ar keytabname
113 Don't ask for a password, but instead get the key from the specified
117 .Fl -lifetime= Ns Ar time
119 Specifies the lifetime of the ticket.
120 The argument can either be in seconds, or a more human readable string
127 Request tickets with the proxiable flag set.
133 The ticket must have the
135 flag set, and must not be expired.
138 .Fl -renewable-life ,
139 with an infinite time.
142 .Fl -renewable-life= Ns Ar time
144 The max renewable ticket life.
147 .Fl -server= Ns Ar principal
149 Get a ticket for a service other than krbtgt/LOCAL.REALM.
152 .Fl -start-time= Ns Ar time
154 Obtain a ticket that starts to be valid
156 (which can really be a generic time specification, like
158 seconds into the future.
165 but with the default keytab name (normally
166 .Ar FILE:/etc/krb5.keytab ) .
171 Try to validate an invalid ticket.
174 .Fl -enctypes= Ns Ar enctypes
176 Request tickets with this particular enctype.
178 .Fl -password-file= Ns Ar filename
180 read the password from the first line of
186 the password will be read from the standard input.
188 .Fl -fcache-version= Ns Ar version-number
190 Create a credentials cache of version
194 .Fl -extra-addresses= Ns Ar enctypes
196 Adds a set of addresses that will, in addition to the systems local
197 addresses, be put in the ticket.
198 This can be useful if all addresses a client can use can't be
199 automatically figured out.
200 One such example is if the client is behind a firewall.
202 .Li libdefaults/extra_addresses
209 Request a ticket with no addresses.
213 Request an anonymous ticket (which means that the ticket will be
214 issued to an anonymous principal, typically
215 .Dq anonymous@REALM ) .
217 Gets AFS tickets, converts them to version 4 format, and stores them
219 Only useful if you have AFS.
228 options can be set to a default value from the
230 section in krb5.conf, see
231 .Xr krb5_appdefault 3 .
237 will set up new credentials caches, and AFS PAG, and then run the given
239 When it finishes the credentials will be removed.
243 Specifies the default credentials cache.
250 Specifies the Kerberos 4 ticket file to store version 4 tickets in.
258 .Xr krb5_appdefault 3 ,