|
|
1.1 root 1: .\" $Source: /mit/kerberos/src/man/RCS/kinit.1,v $
2: .\" $Author: jtkohl $
3: .\" $Header: kinit.1,v 4.6 89/01/23 11:39:11 jtkohl Exp $
4: .\" Copyright 1989 by the Massachusetts Institute of Technology.
5: .\"
6: .\" For copying and distribution information,
7: .\" please see the file <mit-copyright.h>.
8: .\"
9: .TH KINIT 1 "Kerberos Version 4.0" "MIT Project Athena"
10: .SH NAME
11: kinit \- Kerberos login utility
12: .SH SYNOPSIS
13: .B kinit
14: [
15: .B \-irvl
16: ]
17: .SH DESCRIPTION
18: The
19: .I kinit
20: command is used to login to the
21: Kerberos
22: authentication and authorization system.
23: Note that only registered
24: Kerberos
25: users can use the
26: Kerberos
27: system.
28: For information about registering as a
29: Kerberos
30: user,
31: see the
32: .I kerberos(1)
33: manual page.
34: .PP
35: If you are logged in to a workstation that is running the
36: .I toehold
37: service,
38: you do not have to use
39: .I kinit.
40: The
41: .I toehold
42: login procedure will log you into
43: Kerberos
44: automatically.
45: You will need to use
46: .I kinit
47: only in those situations in which
48: your original tickets have expired.
49: (Tickets expire in about a day.)
50: Note as well that
51: .I toehold
52: will automatically destroy your tickets when you logout from the workstation.
53: .PP
54: When you use
55: .I kinit
56: without options,
57: the utility
58: prompts for your username and Kerberos password,
59: and tries to authenticate your login with the local
60: Kerberos
61: server.
62: .PP
63: If
64: Kerberos
65: authenticates the login attempt,
66: .I kinit
67: retrieves your initial ticket and puts it in the ticket file specified by
68: your KRBTKFILE environment variable.
69: If this variable is undefined,
70: your ticket will be stored in the
71: .IR /tmp
72: directory,
73: in the file
74: .I tktuid ,
75: where
76: .I uid
77: specifies your user identification number.
78: .PP
79: If you have logged in to
80: Kerberos
81: without the benefit of the workstation
82: .I toehold
83: system,
84: make sure you use the
85: .I kdestroy
86: command to destroy any active tickets before you end your login session.
87: You may want to put the
88: .I kdestroy
89: command in your
90: .I \.logout
91: file so that your tickets will be destroyed automatically when you logout.
92: .PP
93: The options to
94: .I kinit
95: are as follows:
96: .TP 7
97: .B \-i
98: .I kinit
99: prompts you for a
100: Kerberos
101: instance.
102: .TP
103: .B \-r
104: .I kinit
105: prompts you for a
106: Kerberos
107: realm.
108: This option lets you authenticate yourself with a remote
109: Kerberos
110: server.
111: .TP
112: .B \-v
113: Verbose mode.
114: .I kinit
115: prints the name of the ticket file used, and
116: a status message indicating the success or failure of
117: your login attempt.
118: .TP
119: .B \-l
120: .I kinit
121: prompts you for a ticket lifetime in minutes. Due to protocol
122: restrictions in Kerberos Version 4, this value must be between 5 and
123: 1275 minutes.
124: .SH SEE ALSO
125: .PP
126: kerberos(1), kdestroy(1), klist(1), toehold(1)
127: .SH BUGS
128: The
129: .B \-r
130: option has not been fully implemented.
131: .SH AUTHORS
132: Steve Miller, MIT Project Athena/Digital Equipment Corporation
133: .br
134: Clifford Neuman, MIT Project Athena
This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.