Usage: : kinit [-FfpRkvAn] [--afslog] [--cache=cachename] [-c cachename] [--no-forwardable]
   [--keytab=keytabname] [-t keytabname] [--lifetime=time] [-l time] [--proxiable] [--renew]
   [--renewable] [--renewable-life=time] [-r time] [--server=principal] [-S principal]
   [--start-time=time] [-s time] [--use-keytab] [--validate] [--enctypes=enctypes]...
   [-e enctypes]... [--fcache-version=integer] [--no-addresses] [--extra-addresses=addresses]...
   [-a addresses]... [--anonymous] [--request-pac] [--password-file=string] [--canonicalize]
   [--enterprise] [--pk-enterprise] [--pk-user=id] [-C id] [--x509-anchors=directory] [-D directory]
   [--pk-use-enckey] [--ntlm-domain=domain] [--no-change-default] [--ok-as-delegate]
   [--fast-armor-cache=cache] [--use-referrals] [--windows] [--version] [--help]
   [principal [command]]
--afslog                                  obtain afs tokens
-c cachename, --cache=cachename           credentials cache
-F, --no-forwardable                      get tickets not forwardable
-f                                        get forwardable tickets
-t keytabname, --keytab=keytabname        keytab to use
-l time, --lifetime=time                  lifetime of tickets
-p, --proxiable                           get proxiable tickets
-R, --renew                               renew TGT
--renewable                               get renewable tickets
-r time, --renewable-life=time            renewable lifetime of tickets
-S principal, --server=principal          server to get ticket for
-s time, --start-time=time                when ticket gets valid
-k, --use-keytab                          get key from keytab
-v, --validate                            validate TGT
-e enctypes, --enctypes=enctypes          encryption types to use
--fcache-version=integer                  file cache version to create
-A, --no-addresses                        request a ticket with no addresses
-a addresses, --extra-addresses=addresses include these extra addresses
-n, --anonymous                           request an anonymous ticket
--request-pac                             request a Windows PAC
--password-file=string                    read the password from a file
--canonicalize                            canonicalize client principal
--enterprise                              parse principal as a KRB5-NT-ENTERPRISE name
--pk-enterprise                           use enterprise name from certificate
-C id, --pk-user=id                       principal's public/private/certificate identifier
-D directory, --x509-anchors=directory    directory with CA certificates
--pk-use-enckey                           Use RSA encrypted reply (instead of DH)
--ntlm-domain=domain                      NTLM domain
--no-change-default                       switch the default cache to the new credentials cache
--ok-as-delegate                          honor ok-as-delegate on tickets
--fast-armor-cache=cache                  use this credential cache as FAST armor cache
--use-referrals                           only use referrals, no dns canalisation
--windows                                 get windows behavior