klist  [-e]  [[-c]  [-f]  [-s] [-a  [-n]]] [-k [-t] [-K]] [cache_name |


       Klist lists the Kerberos principal and Kerberos tickets held in a  cre‐
       dentials cache, or the keys held in a keytab file.


       -e     displays  the encryption types of the session key and the ticket
              for each credential in the credential cache, or each key in  the
              keytab file.

       -c     List  tickets  held in a credentials cache.  This is the default
              if neither -c nor -k is specified.

       -f     shows the flags present in the credentials, using the  following

                   F    Forwardable
                   f    forwarded
                   P    Proxiable
                   p    proxy
                   D    postDateable
                   d    postdated
                   R    Renewable
                   I    Initial
                   i    invalid
                   H    Hardware authenticated
                   A    preAuthenticated
                   T    Transit policy checked
                   O    Okay as delegate
                   a    anonymous

       -s     causes  klist  to run silently (produce no output), but to still
              set the exit status according to whether it  finds  the  creden‐
              tials  cache.   The  exit status is `0' if klist finds a creden‐
              tials cache, and `1' if it does not or if the tickets are

       -a     display list of addresses in credentials.

       -n     show numeric addresses instead of reverse-resolving addresses.

       -k     List keys held in a keytab file.

       -t     display the time entry timestamps for each keytab entry  in  the
              keytab file.

       -K     display  the value of the encryption key in each keytab entry in
              the keytab file.

       /etc/krb5.keytab   default location for the local host's keytab file.


       kinit(1), kdestroy(1), krb5(3)


Man(1) output converted with man2html