Configuration Guide for Kerberos Client Products on HP-UX 11.0 | HP-UX 11i v1 | HP-UX 11i v1.6 | HP-UX 11i v2

Introduction to the Kerberos Products and GSS-API

KRB5 Client Software

Chapter 250

-p The -p option requests proxiable ticket.

-f The -f option requests forwardable ticket.

-r renewable_life The -r option requests renewable tickets, with a total

lifetime of renewable_life. The duration is in the

same format as the -l option, with the same

delimiters.

-R The -R option requests renewal of the ticket-granting

ticket. Note that an expired ticket cannot be renewed,

even if the ticket is still within its renewable life.

-k [-t keytab_ﬁle] The -k option requests a host ticket obtained from a

key in the local host’s keytab ﬁle. The name and

location of the keytab ﬁle may be speciﬁed with the -t

keytab_file option; otherwise the default name and

location will be used.

The default credentials cache may vary between

systems. If the KRB5CCNAME environment variable is

set, its value is used to name the default ticket cache.

Any existing contents of the cache are destroyed by

kinit.

-c [cache_filename] The -c option uses cache_name as the

credentials (ticket)cache name andlocation; otherwise,

the default cache name and location will be used.

-S service_name The -s option speciﬁes an alternateservice nameto get

initial tickets.

Principal The Principal uses the principal name from an

existing cache, if there is one.

kinit supports the [appdefaults] section. The relationships speciﬁed

here can be over-ridden by the command-line options. The following

relationships are supported by kinit in the [appdefaults] section:

forwardable This relationship speciﬁes if an user can obtain a

forwardable ticket. Valid values with which it can be

set are: true, false, yes, y, no, n, on, off.

proxiable This relationship speciﬁes if an user can obtain a

proxiable ticket. Valid values to which it can be set are:

true, false, yes, y, no, n, on, off.