BSD 4_4_Lite2 development
[unix-history] / usr / share / man / cat1 / kinit.0
KINIT(1) BSD Reference Manual KINIT(1)
N\bNA\bAM\bME\bE
kinit - Kerberos login utility
S\bSY\bYN\bNO\bOP\bPS\bSI\bIS\bS
k\bki\bin\bni\bit\bt [ -\b-i\bir\brv\bvl\bl ]
D\bDE\bES\bSC\bCR\bRI\bIP\bPT\bTI\bIO\bON\bN
The _\bk_\bi_\bn_\bi_\bt command is used to login to the Kerberos authen-
tication and authorization system. Note that only regis-
tered Kerberos users can use the Kerberos system. For
information about registering as a Kerberos user, see the
_\bk_\be_\br_\bb_\be_\br_\bo_\bs_\b(_\b1_\b) manual page.
If you are logged in to a workstation that is running the
_\bt_\bo_\be_\bh_\bo_\bl_\bd service, you do not have to use _\bk_\bi_\bn_\bi_\bt_\b. The _\bt_\bo_\be_\b-
_\bh_\bo_\bl_\bd login procedure will log you into Kerberos automati-
cally. You will need to use _\bk_\bi_\bn_\bi_\bt only in those situa-
tions in which your original tickets have expired. (Tick-
ets expire in about a day.) Note as well that _\bt_\bo_\be_\bh_\bo_\bl_\bd
will automatically destroy your tickets when you logout
from the workstation.
When you use _\bk_\bi_\bn_\bi_\bt without options, the utility prompts
for your username and Kerberos password, and tries to
authenticate your login with the local Kerberos server.
If Kerberos authenticates the login attempt, _\bk_\bi_\bn_\bi_\bt
retrieves your initial ticket and puts it in the ticket
file specified by your KRBTKFILE environment variable. If
this variable is undefined, your ticket will be stored in
the _\b/_\bt_\bm_\bp directory, in the file _\bt_\bk_\bt_\bu_\bi_\bd _\b, where _\bu_\bi_\bd speci-
fies your user identification number.
If you have logged in to Kerberos without the benefit of
the workstation _\bt_\bo_\be_\bh_\bo_\bl_\bd system, make sure you use the _\bk_\bd_\be_\b-
_\bs_\bt_\br_\bo_\by command to destroy any active tickets before you end
your login session. You may want to put the _\bk_\bd_\be_\bs_\bt_\br_\bo_\by com-
mand in your _\b._\bl_\bo_\bg_\bo_\bu_\bt file so that your tickets will be
destroyed automatically when you logout.
The options to _\bk_\bi_\bn_\bi_\bt are as follows:
-\b-i\bi _\bk_\bi_\bn_\bi_\bt prompts you for a Kerberos instance.
-\b-r\br _\bk_\bi_\bn_\bi_\bt prompts you for a Kerberos realm. This
option lets you authenticate yourself with a remote
Kerberos server.
-\b-v\bv Verbose mode. _\bk_\bi_\bn_\bi_\bt prints the name of the ticket
file used, and a status message indicating the suc-
cess or failure of your login attempt.
MIT Project Athena Kerberos Version 4.0 1
KINIT(1) BSD Reference Manual KINIT(1)
-\b-l\bl _\bk_\bi_\bn_\bi_\bt prompts you for a ticket lifetime in minutes.
Due to protocol restrictions in Kerberos Version 4,
this value must be between 5 and 1275 minutes.
S\bSE\bEE\bE A\bAL\bLS\bSO\bO
kerberos(1), kdestroy(1), klist(1), toehold(1)
B\bBU\bUG\bGS\bS
The -\b-r\br option has not been fully implemented.
A\bAU\bUT\bTH\bHO\bOR\bRS\bS
Steve Miller, MIT Project Athena/Digital Equipment Corpo-
ration
Clifford Neuman, MIT Project Athena
MIT Project Athena Kerberos Version 4.0 2