| blob | a7a33e800c8e20f737ce477f99237c4807d7384e |
1 .\" Copyright (c) 2002 - 2007 Kungliga Tekniska Högskolan
2 .\" (Royal Institute of Technology, Stockholm, Sweden).
3 .\" All rights reserved.
4 .\"
5 .\" Redistribution and use in source and binary forms, with or without
6 .\" modification, are permitted provided that the following conditions
7 .\" are met:
8 .\"
9 .\" 1. Redistributions of source code must retain the above copyright
10 .\" notice, this list of conditions and the following disclaimer.
11 .\"
12 .\" 2. Redistributions in binary form must reproduce the above copyright
13 .\" notice, this list of conditions and the following disclaimer in the
14 .\" documentation and/or other materials provided with the distribution.
15 .\"
16 .\" 3. Neither the name of the Institute nor the names of its contributors
17 .\" may be used to endorse or promote products derived from this software
18 .\" without specific prior written permission.
19 .\"
20 .\" THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
21 .\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 .\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 .\" ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
24 .\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 .\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 .\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 .\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 .\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 .\" SUCH DAMAGE.
31 .\"
32 .\" $Id$
33 .\"
34 .Dd September 18, 2006
35 .Dt KIMPERSONATE 8
36 .Os Heimdal
37 .Sh NAME
38 .Nm kimpersonate
39 .Nd
40 impersonate a user when there exist a srvtab, keyfile or KeyFile
41 .Sh SYNOPSIS
42 .Nm
43 .Op Fl s Ar string \*(Ba Fl -server= Ns Ar string
44 .Op Fl c Ar string \*(Ba Fl -client= Ns Ar string
45 .Op Fl k Ar string \*(Ba Fl -keytab= Ns Ar string
46 .Op Fl 5 | Fl -krb5
47 .Op Fl e Ar integer \*(Ba Fl -expire-time= Ns Ar integer
48 .Op Fl a Ar string \*(Ba Fl -client-address= Ns Ar string
49 .Op Fl t Ar string \*(Ba Fl -enc-type= Ns Ar string
50 .Op Fl f Ar string \*(Ba Fl -ticket-flags= Ns Ar string
51 .Op Fl -verbose
52 .Op Fl -version
53 .Op Fl -help
54 .Sh DESCRIPTION
55 The
56 .Nm
57 program creates a "fake" ticket using the service-key of the service.
58 The service key can be read from a Kerberos 5 keytab, AFS KeyFile or
59 (if compiled with support for Kerberos 4) a Kerberos 4 srvtab.
60 Supported options:
61 .Bl -tag -width Ds
62 .It Fl s Ar string Ns , Fl -server= Ns Ar string
63 name of server principal
64 .It Fl c Ar string Ns , Fl -client= Ns Ar string
65 name of client principal
66 .It Fl k Ar string Ns , Fl -keytab= Ns Ar string
67 name of keytab file
68 .It Fl 5 Ns , Fl -krb5
69 create a Kerberos 5 ticket
70 .It Fl e Ar integer Ns , Fl -expire-time= Ns Ar integer
71 lifetime of ticket in seconds
72 .It Fl a Ar string Ns , Fl -client-address= Ns Ar string
73 address of client
74 .It Fl t Ar string Ns , Fl -enc-type= Ns Ar string
75 encryption type
76 .It Fl f Ar string Ns , Fl -ticket-flags= Ns Ar string
77 ticket flags for krb5 ticket
78 .It Fl -verbose
79 Verbose output
80 .It Fl -version
81 Print version
82 .It Fl -help
83 .El
84 .Sh FILES
85 Uses
86 .Pa /etc/krb5.keytab,
87 .Pa /etc/srvtab
88 and
89 .Pa /usr/afs/etc/KeyFile
90 when available and the
91 .Fl k
92 option is used with an appropriate prefix.
93 .Sh EXAMPLES
94 .Nm
95 can be used in
96 .Nm samba
97 root preexec option
98 or for debugging.
99 .Nm
100 -s host/hummel.e.kth.se@E.KTH.SE -c lha@E.KTH.SE -5
101 will create a Kerberos 5 ticket for lha@E.KTH.SE for the host
102 hummel.e.kth.se if there exists a keytab entry for it in
103 .Pa /etc/krb5.keytab .
104 .Sh SEE ALSO
105 .Xr kinit 1 ,
106 .Xr klist 1
107 .Sh AUTHORS
108 Love Hornquist Astrand <lha@kth.se>