OS Manuals

/usr/bin/kinit

The Kerberos network authentication system

From krb5 1.22.2-r6 (os), captured 2026-11-06 by running kinit --help (exit 2). permalink

/usr/bin/kinit: unrecognized option '--help'
Usage: kinit [-V] [-l lifetime] [-s start_time] [-r renewable_life]
	[-f | -F] [-p | -P] [-n] [-a | -A] [-C] [-E]
	[--request-pac | --no-request-pac]
	[-v] [-R] [-k [-i|-t keytab_file]] [-c cachename]
	[-S service_name] [-I input_ccache] [-T ticket_armor_cache]
	[-X <attribute>[=<value>]] [principal]

    options:
	-V verbose
	-l lifetime
	-s start time
	-r renewable lifetime
	-f forwardable
	-F not forwardable
	-p proxiable
	-P not proxiable
	-n anonymous
	-a include addresses
	-A do not include addresses
	-v validate
	-R renew
	-C canonicalize
	-E client is enterprise principal name
	-k use keytab
	-i use default client keytab (with -k)
	-t filename of keytab to use
	-c Kerberos 5 cache name
	-S service
	-I input credential cache
	-T armor credential cache
	-X <attribute>[=<value>]
	--{,no}-request-pac request KDC include/exclude a PAC
Options (21)
OptionDescriptionSource
-V verbosedisplay verbose output.help + man
-l lifetime(Time duration string.) Requests a ticket with the lifetime lifetime.help + man
-f forwardablerequests forwardable tickets.help + man
-p proxiablerequests proxiable tickets.help + man
-n anonymousRequests anonymous processing.help + man
-v validaterequests that the ticket-granting ticket in the cache (with the invalid flag set) be passed to the KDC for validation.help + man
-R renewrequests renewal of the ticket-granting ticket.help + man
-C canonicalizerequests canonicalization of the principal name, and allows the KDC to reply with a different client principal from the one requested.help + man
-S servicespecify an alternate service name to use when getting initial tickets.help + man
-X attribute>[=<valuehelp
-s start_time(Time duration string.) Requests a postdated ticket. (in the manual page but not in --help)man
-r renewable_life(Time duration string.) Requests renewable tickets, with a total lifetime of renewable_life. (in the manual page but not in --help)man
-Frequests non-forwardable tickets. (in the manual page but not in --help)man
-Prequests non-proxiable tickets. (in the manual page but not in --help)man
-arequests tickets restricted to the host's local address[es]. (in the manual page but not in --help)man
-Arequests tickets not restricted by address. (in the manual page but not in --help)man
-Etreats the principal name as an enterprise name. (in the manual page but not in --help)man
-I input_ccacheSpecifies the name of a credentials cache that already contains a ticket. (in the manual page but not in --help)man
-T armor_ccacheSpecifies the name of a credentials cache that already contains a ticket. (in the manual page but not in --help)man
-c cache_nameuse cache_name as the Kerberos 5 credentials (ticket) cache location. (in the manual page but not in --help)man
--request-pac, --no-request-pacmutually exclusive. (in the manual page but not in --help)man

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.