SYNOPSIS

       klist  [-e]  [[-c]  [-l]  [-A]  [-f]  [-s]  [-a   [-n]]] [-k [-t] [-K]]
       [cache_name | keytab_name]

DESCRIPTION

       Klist lists the Kerberos principal and Kerberos tickets held in a  cre‐
       dentials cache, or the keys held in a keytab file.

OPTIONS

       -e     displays  the encryption types of the session key and the ticket
              for each credential in the credential cache, or each key in  the
              keytab file.

       -c     List  tickets  held in a credentials cache.  This is the default
              if neither -c nor -k is specified.

       -l     If a cache collection is available, displays a table summarizing
              the caches present in the collection.

       -A     If a cache collection is available, displays the contents of all
              of the caches in the collection.

       -f     shows the flags present in the credentials, using the  following
              abbreviations:

                   F    Forwardable
                   f    forwarded
                   P    Proxiable
                   p    proxy
                   D    postDateable
                   d    postdated
                   R    Renewable
                   I    Initial
                   i    invalid
                   H    Hardware authenticated
                   A    preAuthenticated
                   T    Transit policy checked
                   O    Okay as delegate
                   a    anonymous

       -s     causes  klist  to run silently (produce no output), but to still
              set the exit status according to whether it  finds  the  creden‐
              tials  cache.   The  exit status is `0' if klist finds a creden‐
              tials cache, and `1' if it does not or if the tickets are
               expired.

       -a     display list of addresses in credentials.

       -n     show numeric addresses instead of reverse-resolving addresses.

       -k     List keys held in a keytab file.

       Klist uses the following environment variables:

       KRB5CCNAME      Location of the default Kerberos 5 credentials (ticket)
                       cache, in the form type:residual.  If no type prefix is
                       present,  the  FILE  type  is assumed.  The type of the
                       default cache may determine the availability of a cache
                       collection;  for  instance, a default cache of type DIR
                       causes caches within the directory to be present in the
                       collection.

FILES

       /tmp/krb5cc_[uid]  default  location  of  Kerberos  5 credentials cache
                          ([uid] is the decimal UID of the user).

       /etc/krb5.keytab   default location for the local host's keytab file.

SEE ALSO

       kinit(1), kdestroy(1), krb5(3)



                                                                      KLIST(1)