OS Manuals

/usr/bin/kgetcred

Implementation of Kerberos 5

From heimdal 7.8.0-r55 (os), captured 2026-11-05 by running kgetcred --help (exit 0). permalink

Usage: kgetcred [-Hn] [--cache=cache] [-c cache] [--out-cache=cache]
   [--delegation-credential-cache=cache] [--canonicalize] [--canonical] [--forwardable]
   [--no-transit-check] [--enctype=enctype] [-e enctype] [--impersonate=principal]
   [--name-type=string] [--hostbased] [--no-store] [--cached-only] [--anonymous] [--debug]
   [--version] [--help] service
-c cache, --cache=cache             credential cache to use
--out-cache=cache                   credential cache to store credential in
--delegation-credential-cache=cache where to find the ticket use for delegation
--canonicalize                      canonicalize the principal (chase referrals)
--canonical                         the name components are canonical
--forwardable                       forwardable ticket requested
-e enctype, --enctype=enctype       encryption type to use
--impersonate=principal             client to impersonate
--name-type=string                  Kerberos name type
-H, --hostbased                     indicate that the name is a host-based service name
--no-store                          don't store the tickets obtained in the cache
--cached-only                       don't talk to the KDC, just search the cache
-n, --anonymous                     request an anonymous ticket
Options (17)
OptionDescriptionSource
-c, --cache cachethe credential cache to use.help + man
--out-cache cachecredential cache to store credential inhelp
--canonicalizerequests that the KDC canonicalize the principal.help + man
--canonicalturns off local canonicalization of the principal name.help + man
--forwardableforwardable ticket requestedhelp + man
-e, --enctype enctypeencryption type to use.help + man
--impersonate principalclient to impersonatehelp
--name-type stringthe name-type to use when parsing the principal name.help + man
-H, --hostbasedindicate that the name is a host-based service namehelp + man
--no-storedon't store the tickets obtained in the cachehelp + man
--cached-onlydon't talk to the KDC, just search the cachehelp + man
-n, --anonymousobtain an anonymous service ticket.help + man
--delegation-credential-cache cachethe credential cache to use for delegation. (in the manual page but not in --help)man
--no-transit-checkrequests that the KDC doesn't do transit checking. (in the manual page but not in --help)man
--debugenables debug output to stderr. (in the manual page but not in --help)man
--version (in the manual page but not in --help)man
--helpIf the --canonical option is used, then no further canonicalization should be done locally by the client (for example, DNS), but if --canonicalize is used, then the client will ask that the KDC… (in the manual page but not in --help)man

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.