kinit.1 (2010 09)

kinit(1) kinit(1)

The default credentials cache may vary between systems. If the

KRB5CCNAME

environment variable is set, its value is used to name the default ticket cache. Any

existing contents of the cache are destroyed by

kinit.

-S service_name Speciﬁes an alternate service name to use when getting initial tickets.

principal Uses the principal name from an existing cache if there is one.

kinit supports the [appdefaults]

section. The relationships speciﬁed here can be over-ridden by

the command-line options. The following relationships are supported by

kinit in the

[appdefaults]

section:

forwardable This relationship speciﬁes if a user can obtain a forwardable ticket. Valid values it

can be set to are:

true, false

, yes, y, no, n, on, off.

proxiable This relationship speciﬁes if a user can obtain a proxiable ticket. Valid values it

can be set to are:

true, false

, yes, y, no, n, on, off.

tkt_lifetime This relationship speciﬁes the lifetime of the ticket to be obtained. The unit of life-

time is either seconds, minutes, hours or days.

renew_lifetime

This relationship speciﬁes the renewable life of the ticket to be obtained. The unit

of lifetime is either seconds, minutes, hours or days.

Note

For DCE operations use

/opt/dce/bin/kinit

EXTERNAL INFLUENCES

Environment Variables

kinit uses the following environment variable:

KRB5CCNAME Location of the credentials ticket cache.

AUTHOR

kinit was developed by the Massachusetts Institute of Technology.

FILES

/tmp/krb5cc_{uid} Default credentials cache. {uid } is the decimal UID of the user.

/etc/krb5.keytab

Default location for the local host’s keytab ﬁle.