KDESTROY(1)

💅 KDESTROY — bestie edition (from the MIT Kerberos manual, kdestroy(1)) ✨

---

✨ NAME ✨

okay so kdestroy — it destroys your Kerberos tickets. that's the whole job. it's the "okay bye i'm logging off" button for your auth 🎀

---

🌸 SYNOPSIS 🌸

kdestroy [-A] [-q] [-c cache_name] [-p princ_name]

---

🦋 DESCRIPTION 🦋

so the kdestroy utility destroys the user's active Kerberos authorization tickets — and the way it does that is by overwriting and deleting the credentials cache that contains them. like, not just ghosting the tickets, actually scribbling over them and then yeeting the cache. iconique, honestly 💅

if the credentials cache isn't specified, then the default credentials cache is the one that gets destroyed. no cache left behind, periodt.

---

💖 OPTIONS 💖

• -A — destroys all caches in the collection, if a cache collection is actually available. you can pair it with -c to say exactly which collection should get destroyed. it's giving "spring cleaning but for every cache you own" 🧹✨
• -q — run quietly. normally kdestroy will beep at you if it fails to destroy the user's tickets (rude of it, tbh 😭). the -q flag suppresses this behavior. so it goes full stealth mode, no noise.
• -c cache_name — use cache_name as the credentials (ticket) cache name and location. if you don't use this option, the default cache name and location get used instead.

just so you know — the default credentials cache may vary between systems. and if the KRB5CCNAME environment variable is set, then its value is what's used to name the default ticket cache. so like, check your env before you assume anything, bestie 🙈

• -p princ_name — if a cache collection is available, destroy the cache for princ_name instead of the primary cache. can be used with the -c option to specify which collection gets searched. very "i'm not mad at the whole collection, i'm mad at this one" energy 💀

---

🎀 NOTE 🎀

most installations recommend that you place the kdestroy command in your .logout file, so that your tickets are destroyed automatically when you log out. basically: set it and forget it, and your tickets clean themselves up on the way out. self-care 🫶

---

🌈 ENVIRONMENT 🌈

see kerberos for a description of Kerberos environment variables. that's where the lore lives 📖

---

⭐ FILES ⭐

• FILE:/tmp/krb5cc_%{uid} — default location of Kerberos 5 credentials cache

---

👑 SEE ALSO 👑

kinit, klist, kerberos

---

💜 AUTHOR 💜

MIT

---

🌸 COPYRIGHT 🌸

1985-2025, MIT

---

and that's the whole page, bestie! this one came from MIT Kerberos, version 1.22.1 — go forth, destroy those tickets, and log off like the main character you are 💖✨🎀🦋