HP-UX Reference (11i v1 05/09) - 1 User Commands A-M (vol 1)

kdestroy(1) kdestroy(1)

NAME

kdestroy - destroy Kerberos tickets

SYNOPSIS

kdestroy [-q][-c cache_ﬁlename]

DESCRIPTION

The

kdestroy utility destroys the user’s active Kerberos authorization tickets by writing zeros to the

speciﬁed credentials cache that contains them. If the credentials cache is not speciﬁed, the default creden-

tials cache is destroyed.

Options

-q Run quietly. Normally kdestroy beeps if it fails to destroy the user’s tickets. The

-q ﬂag suppresses this behavior.

-c cache_filename Use cache_ﬁlename as the credentials ticket cache name and location. If this option is

not used, the default cache name and location is used.

The default credentials cache may vary between systems. If the

KRB5CCNAME environment variable is set,

its value is used to name the default ticket cache.

Most installations recommend that you place the

kdestroy command in your .logout ﬁle, so that your

tickets are destroyed automatically when you log out.

Note

For DCE operations use

/opt/dce/bin/kdestroy

Environment

kdestroy uses the following environment variable:

KRB5CCNAME Location of the credentials ticket cache.

WARNINGS

Only the tickets in the speciﬁed credentials cache are destroyed. Separate ticket caches are used to hold

root instance and password changing tickets. Even these should be destroyed. It is recommended that to

keep all user tickets in a single credentials cache.

FILES

/tmp/krb5cc_ {uid} Default credentials cache. {uid} is the decimal UID of the user.

AUTHOR

kdestroy was developed by the Massachusetts Institute of Technology.