Usage: : kinit [-FfpRkvAn] [--afslog] [--cache=cachename] [-c cachename] [--no-forwardable] [--keytab=keytabname] [-t keytabname] [--lifetime=time] [-l time] [--proxiable] [--renew] [--renewable] [--renewable-life=time] [-r time] [--server=principal] [-S principal] [--start-time=time] [-s time] [--use-keytab] [--validate] [--enctypes=enctypes]... [-e enctypes]... [--fcache-version=integer] [--no-addresses] [--extra-addresses=addresses]... [-a addresses]... [--anonymous] [--request-pac] [--password-file=string] [--canonicalize] [--enterprise] [--pk-enterprise] [--pk-user=id] [-C id] [--x509-anchors=directory] [-D directory] [--pk-use-enckey] [--ntlm-domain=domain] [--no-change-default] [--ok-as-delegate] [--fast-armor-cache=cache] [--use-referrals] [--windows] [--version] [--help] [principal [command]] --afslog obtain afs tokens -c cachename, --cache=cachename credentials cache -F, --no-forwardable get tickets not forwardable -f get forwardable tickets -t keytabname, --keytab=keytabname keytab to use -l time, --lifetime=time lifetime of tickets -p, --proxiable get proxiable tickets -R, --renew renew TGT --renewable get renewable tickets -r time, --renewable-life=time renewable lifetime of tickets -S principal, --server=principal server to get ticket for -s time, --start-time=time when ticket gets valid -k, --use-keytab get key from keytab -v, --validate validate TGT -e enctypes, --enctypes=enctypes encryption types to use --fcache-version=integer file cache version to create -A, --no-addresses request a ticket with no addresses -a addresses, --extra-addresses=addresses include these extra addresses -n, --anonymous request an anonymous ticket --request-pac request a Windows PAC --password-file=string read the password from a file --canonicalize canonicalize client principal --enterprise parse principal as a KRB5-NT-ENTERPRISE name --pk-enterprise use enterprise name from certificate -C id, --pk-user=id principal's public/private/certificate identifier -D directory, --x509-anchors=directory directory with CA certificates --pk-use-enckey Use RSA encrypted reply (instead of DH) --ntlm-domain=domain NTLM domain --no-change-default switch the default cache to the new credentials cache --ok-as-delegate honor ok-as-delegate on tickets --fast-armor-cache=cache use this credential cache as FAST armor cache --use-referrals only use referrals, no dns canalisation --windows get windows behavior
Options (33)
| Option | Description | Source |
|---|---|---|
--afslog | Gets AFS tickets, converts them to version 4 format, and stores them in the kernel. | help + man |
-c, --cache cachename | The credentials cache to put the acquired ticket in, if other than default. | help + man |
-F, --no-forwardable --no-forwardable | Do not obtain a forwardable ticket. | help + man |
-f --forwardable | Obtain a ticket than can be forwarded to another host. | help + man |
-t, --keytab keytabname | Don't ask for a password, but instead get the key from the specified keytab. | help + man |
-l, --lifetime time | Specifies the lifetime of the ticket. | help + man |
-p, --proxiable | Request tickets with the proxiable flag set. | help + man |
-R, --renew | Try to renew ticket. | help + man |
--renewable | The same as --renewable-life, with an infinite time. | help + man |
-r, --renewable-life time | The max renewable ticket life. | help + man |
-S, --server principal | Get a ticket for a service other than krbtgt/LOCAL.REALM. | help + man |
-s, --start-time time | Obtain a ticket that starts to be valid time (which can really be a generic time specification, like ‘1h’) seconds into the future. | help + man |
-k, --use-keytab | The same as --keytab, but with the default keytab name (normally FILE:/etc/krb5.keytab). | help + man |
-v, --validate | Try to validate an invalid ticket. | help + man |
-e, --enctypes enctypes | Request tickets with this particular enctype. | help + man |
--fcache-version integer | Create a credentials cache of version version-number. | help + man |
-A, --no-addresses | Request a ticket with no addresses. | help + man |
-n, --anonymous | Request an anonymous ticket. | help + man |
--request-pac | request a Windows PAC | help |
--password-file string | read the password from the first line of filename. | help + man |
--canonicalize | canonicalize client principal | help |
--enterprise | Parse principal as a enterprise (KRB5-NT-ENTERPRISE) name. | help + man |
--pk-enterprise | use enterprise name from certificate | help |
-C, --pk-user id | principal's public/private/certificate identifier | help |
-D, --x509-anchors directory | directory with CA certificates | help |
--pk-use-enckey | Use RSA encrypted reply (instead of DH) | help |
--ntlm-domain domain | NTLM domain | help |
--no-change-default | switch the default cache to the new credentials cache | help |
--ok-as-delegate | honor ok-as-delegate on tickets | help |
--fast-armor-cache cache | use this credential cache as FAST armor cache | help |
--use-referrals | only use referrals, no dns canalisation | help |
--windows | get windows behavior | help |
-a, --extra-addresses enctypes | Adds a set of addresses that will, in addition to the systems local addresses, be put in the ticket. (in the manual page but not in --help) | man |