OS Manuals

/usr/bin/klist

The Kerberos network authentication system

From krb5 1.22.2-r6 (os), captured 2026-11-06 by running klist --help (exit 1). permalink

/usr/bin/klist: invalid option -- '-'
Usage: klist [-e] [-V] [[-c] [-l] [-A] [-d] [-f] [-s] [-a [-n]]] [-k [-i] [-t] [-K]] [-C] [name]
	-c specifies credentials cache
	-k specifies keytab
	   (Default is credentials cache)
	-i uses default client keytab if no name given
	-l lists credential caches in collection
	-A shows content of all credential caches
	-e shows the encryption type
	-V shows the Kerberos version and exits
	options for credential caches:
		-d shows the submitted authorization data types
		-f shows credentials flags
		-s sets exit status based on valid tgt existence
		-a displays the address list
			-n do not reverse-resolve
	options for keytabs:
		-t shows keytab entry timestamps
		-K shows keytab entry keys
		-C includes configuration data entries
Options (15)
OptionDescriptionSource
-eDisplays the encryption types of the session key and the ticket for each credential in the credential cache, or each key in the keytab file.man
-lIf a cache collection is available, displays a table summarizing the caches present in the collection.man
-AIf a cache collection is available, displays the contents of all of the caches in the collection.man
-cList tickets held in a credentials cache.man
-fShows the flags present in the credentials, using the following abbreviations:man
-sCauses klist to run silently (produce no output).man
-aDisplay list of addresses in credentials.man
-nShow numeric addresses instead of reverse-resolving addresses.man
-CList configuration data that has been stored in the credentials cache when klist encounters it.man
-kList keys held in a keytab file.man
-iIn combination with -k, defaults to using the default client keytab instead of the default acceptor keytab, if no name is given.man
-tDisplay the time entry timestamps for each keytab entry in the keytab file.man
-KDisplay the value of the encryption key in each keytab entry in the keytab file.man
-dDisplay the authdata types (if any) for each entry.man
-VDisplay the Kerberos version number and exit.man

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.