klist [-e] [[-c] [-l] [-A] [-f] [-s] [-a [-n]]] [-k [-t] [-K]]
[cache_name | keytab_name]
Klist lists the Kerberos principal and Kerberos tickets held in a cre‐
dentials cache, or the keys held in a keytab file.
-e displays the encryption types of the session key and the ticket
for each credential in the credential cache, or each key in the
-c List tickets held in a credentials cache. This is the default
if neither -c nor -k is specified.
-l If a cache collection is available, displays a table summarizing
the caches present in the collection.
-A If a cache collection is available, displays the contents of all
of the caches in the collection.
-f shows the flags present in the credentials, using the following
H Hardware authenticated
T Transit policy checked
O Okay as delegate
-s causes klist to run silently (produce no output), but to still
set the exit status according to whether it finds the creden‐
tials cache. The exit status is `0' if klist finds a creden‐
tials cache, and `1' if it does not or if the tickets are
-a display list of addresses in credentials.
-n show numeric addresses instead of reverse-resolving addresses.
-k List keys held in a keytab file.
Klist uses the following environment variables:
KRB5CCNAME Location of the default Kerberos 5 credentials (ticket)
cache, in the form type:residual. If no type prefix is
present, the FILE type is assumed. The type of the
default cache may determine the availability of a cache
collection; for instance, a default cache of type DIR
causes caches within the directory to be present in the
/tmp/krb5cc_[uid] default location of Kerberos 5 credentials cache
([uid] is the decimal UID of the user).
/etc/krb5.keytab default location for the local host's keytab file.
kinit(1), kdestroy(1), krb5(3)
Man(1) output converted with