blob: d554ec0ad8e093c419b0bce6f63b0eaa9f8186b8 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
.TH "KVNO" "1" "January 06, 2012" "0.0.1" "MIT Kerberos"
.SH NAME
kvno \- print key version numbers of Kerberos principals
.
.nr rst2man-indent-level 0
.
.de1 rstReportMargin
\\$1 \\n[an-margin]
level \\n[rst2man-indent-level]
level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
-
\\n[rst2man-indent0]
\\n[rst2man-indent1]
\\n[rst2man-indent2]
..
.de1 INDENT
.\" .rstReportMargin pre:
. RS \\$1
. nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin]
. nr rst2man-indent-level +1
.\" .rstReportMargin post:
..
.de UNINDENT
. RE
.\" indent \\n[an-margin]
.\" old: \\n[rst2man-indent\\n[rst2man-indent-level]]
.nr rst2man-indent-level -1
.\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
.in \\n[rst2man-indent\\n[rst2man-indent-level]]u
..
.\" Man page generated from reStructeredText.
.
.SH SYNOPSIS
.INDENT 0.0
.TP
.B \fBkvno\fP
.sp
[\fB\-c\fP \fIccache\fP]
[\fB\-e\fP \fIetype\fP]
[\fB\-q\fP]
[\fB\-h\fP]
[\fB\-P\fP]
[\fB\-S\fP \fIsname\fP]
[\fB\-U\fP \fIfor_user\fP]
\fIservice1 service2\fP ...
.UNINDENT
.SH DESCRIPTION
.sp
\fIkvno\fP acquires a service ticket for the specified Kerberos principals and
prints out the key version numbers of each.
.SH OPTIONS
.INDENT 0.0
.INDENT 3.5
.INDENT 0.0
.TP
.B \fB\-c\fP \fIccache\fP
.sp
Specifies the name of a credentials cache to use (if not the default)
.TP
.B \fB\-e\fP \fIetype\fP
.sp
Specifies the enctype which will be requested for the session key of all
the services named on the command line.
This is useful in certain backward compatibility situations.
.TP
.B \fB\-q\fP
.sp
Suppress printing
.TP
.B \fB\-h\fP
.sp
Prints a usage statement and exits
.TP
.B \fB\-P\fP
.sp
Specifies that the \fIservice1 service2\fP ... arguments are to be treated as
services for which credentials should be acquired using constrained delegation.
This option is only valid when used in conjunction with protocol transition.
.TP
.B \fB\-S\fP \fIsname\fP
.sp
Specifies that \fIkrb5_sname_to_principal()\fP will be used to build principal names.
If this flag is specified, the \fIservice1 service2\fP ... arguments are interpreted as
\fIhostnames\fP (rather than principal names),
and \fIsname\fP is interpreted as the service name.
.TP
.B \fB\-U\fP \fIfor_user\fP
.sp
Specifies that protocol transition (S4U2Self) is to be used
to acquire a ticket on behalf of \fIfor_user\fP.
If constrained delegation is not requested,
the service name must match the credentials cache client principal.
.UNINDENT
.UNINDENT
.UNINDENT
.SH ENVIRONMENT
.sp
\fIkvno\fP uses the following environment variable:
.INDENT 0.0
.INDENT 3.5
.sp
\fBKRB5CCNAME\fP \- Location of the credentials (ticket) cache.
.UNINDENT
.UNINDENT
.SH FILES
.sp
/tmp/krb5cc_[uid] \- Default location of the credentials cache ([uid] is the decimal UID of the user).
.SH SEE ALSO
.sp
kinit(1), kdestroy(1)
.SH AUTHOR
MIT
.SH COPYRIGHT
2011, MIT
.\" Generated by docutils manpage writer.
.
|
