/sys$common/syshlp/helplib.hlb
DCE_SECURITY, Admin Intro, kinit

 *Conan The Librarian (sorry for the slow response - running on an old VAX)

  NAME
    kinit - Obtains and caches ticket-granting ticket

  SYNOPSIS

    kinit [-c cachename] [-f] [-l lifetime] [-p] [-r lifetime] [-v]
          [principal]

  OPTIONS

    -c cachename
             Specifies an alternative credentials cache, cachename, to be
             used in place of the default credentials cache.  The kinit
             command overwrites the contents of the alternative cache with
             the current credentials.
             The name of the default credentials cache may vary between
             systems.  However, if the KRB5CCNAME logical name is set,
             its value is used to name the default cache.

    -f       Requests the FORWARDABLE option.  This option allows a ticket-
             granting ticket with a different network address than the
             present ticket-granting ticket to be issued to the principal.
             For forwardable tickets to be granted, the principal's account
             in the registry must specify that the principal can be granted
             forwardable tickets.

    -l lifetime
             Specifies the lifetime of the ticket-granting ticket in hours.
             If this option is not specified, the default ticket lifetime
             (set by each site using the rgy_edit command) is used.

    -p       Requests the PROXIABLE option.  This option allows a ticket
             with a different network address than the present ticket to
             be issued to the principal. For proxiable tickets to be
             granted, the principal's account in the registry must specify
             that the principal can be granted proxiable tickets.

    -r lifetime
             Requests the RENEWABLE option.  This option allows the tickets
             issued to the principal to be renewed.  For renewable tickets
             to be granted, the principal's account in the registry must
             specify that the principal can be granted renewable tickets.
             The lifetime of the ticket-granting ticket is specified in
             hours by lifetime.

    -v       Specifies that the command should run in verbose mode.

  ARGUMENTS

    principal
             The principal argument specifies the name of the principal
             for whom the ticket-granting ticket should be obtained.  If
             principal is omitted, the principal name from the existing
             cache is reused.

  DESCRIPTION

  The kinit command can be used to refresh a DCE credentials cache.  When
  you invoke kinit, it prompts for your password.

  The ticket lifetime and renewable lifetime are set in the following
  format:

    {num {interval}}...

  where:

    num      A number that specifies the number of the interval; interval
             can be specified by the following:

             +
             w - weeks

             +
             d - days

             +
             h - hours

             +
             m - minutes

             +
             s - seconds

  For example, to set the lifetime to 3 weeks, 5 days, and 10 hours, the
  entry would be the following:

     3w5d10h

  FILES

    dce$local:[var.security.creds]DCECRED*
                       If the KRB5CCNAME logical name is not set, the
                       name of the file is in the form shown.  If the
                       KRB5CCNAME logical name is set, its setting
                       determines the name of the file.

  RELATED INFORMATION

    COMMANDS: klist
              kdestroy
  Close     HLB-list     TLB-list     Help  

[legal] [privacy] [GNU] [policy] [netiquette] [sponsors] [FAQ]
Tweet
Polarhome, production since 1999.
Member of Polarhome portal.