.TH KSRVTGT 1 "" "MIT Network Services"
.SH NAME
krbtgp \- Kerberos ticket-granting-program using a srvtab file
.SH SYNOPSIS
.B ksrvtgt
[-ds] [-keyfile keyfile] [-tktfile tktfile] [-lifetime lifetime] [-kvno kvno] service
.SH DESCRIPTION
If the -s options is not specified, 
.I krbtgp 
will create a ticket for the specified service, using the service keys 
found in 
.IR keyfile .  
If 
.I keyfile
is not specified, then /etc/srvtab is used as a default.  The ticket will be 
placed in 
.IR tktfile ; 
if 
.I tktfile
is not specified, the standard Kerberos mechanism will be used to determine 
the ticket file name.  If the ticket file exists already, the principal 
of the first ticket in the ticket file will be used to determine the
principal for the newly created ticket.  If the ticket file does not
exist, the user will be prompted for the principal name for the newly
created ticket.
.PP
If the -s option is specified, then 
.B krbtgp
will obtain a Kerberos ticket-granting-ticket for the specified
service and decrypt it using the key specified in
.IR keyfile .
If
.I keyfile
is not specified, /etc/srvtab is used as a default.  The ticket
granting ticket is stored in
.I tktfile
if it was specified, or in the standard ticket file location if it was
not specified.
.PP
The default lifetime of the newly obtained tickets is eight hours.
This may be changed be using the -lifetime option.
.PP
You may use the -kvno option to explicitly specify the kvno of the
ticket to read from the service key; by default, 0 is passed to
read_service_key() which doesn't produce the desired result in some
cases.
.PP
This command is intended to demonstrate that it is 
.B extremely
important to keep /etc/srvtab secure.  It is also intended to be used
as a replace for kservtgt when you need ticket-granting-tickets that
last for a longer than 5 minutes.
.SH FILES
.TP
/etc/srvtab
The default service key file.
.SH SEE ALSO
kerberos(1), kinit(1), kdestroy(1), ksrvtgt(1)