KLIST(1)

💅 KLIST — bestie, let's read your Kerberos creds

okay so this is the klist page from the General Commands Manual section, and honestly? she's a baddie. she reads and displays your Kerberos credentials and we're gonna love her for it. 🎀

🌸 NAME 🌸

klist — list Kerberos credentials ✨ (yes that's literally it, she's a lister, she lists, she serves)

🦋 SYNOPSIS 🦋

klist [-c cache | --cache=cache] [-s | -t | --test] [-T | --tokens]
      [-5 | --v5] [-v | --verbose] [-l | --list-caches] [-f] [--version]
      [--help]

like. look at her. so many little flags. so much power. 💅

👑 DESCRIPTION 👑

okay so klist reads and displays the current tickets in the credential cache — which, iykyk, is also known as the ticket file. that's the whole vibe. she looks at your tickets and tells you what's up. 🔥

here's every option she supports, no skips, no cap:

✨ the options (all of them, periodt) ✨

• -c cache, --cache=cache — which credential cache to list, bestie. you pick it.
• -s, -t, --test — tests whether there's an active and valid TGT for the local realm of the user in the credential cache. like a vibe check but for your ticket. 🫶
• -T, --tokens — displays AFS tokens.
• -5, --v5 — displays the v5 cred cache. this is the default, so like, it's the main character energy option. 👑
• -f — include ticket flags in short form! each character stands for a specific flag, and here's the decoder ring:
  • F — forwardable
  • f — forwarded
  • P — proxiable
  • p — proxied
  • D — postdate-able
  • d — postdated
  • R — renewable
  • I — initial
  • i — invalid
  • A — pre-authenticated
  • H — hardware authenticated

this info also comes out with the --verbose option, but over there it's like, way more yappy about it. same tea, different font. 🍓

• -v, --verbose — verbose output!! include all possible information. and when she says all, she means ALL. here's everything she spills:
  • Server — the principal the ticket is for
  • Ticket etype — the encryption type used in the ticket, followed by the key version of the ticket, if it is available
  • Session key — the encryption type of the session key, if it's different from the encryption type of the ticket
  • Auth time — the time the authentication exchange took place
  • Start time — the time that this ticket is valid from (only printed if it's different from the auth time)
  • End time — when the ticket expires, and if it has already expired this is also noted 😭
  • Renew till — the maximum possible end time of any ticket derived from this one
  • Ticket flags — the flags set on the ticket
  • Addresses — the set of addresses from which this ticket is valid
• -l, --list-caches — lists the credential caches for the current users. heads up though: not all cache types support listing multiple caches. 🙈
• --version — shows the version, iconic behavior.
• --help — the classic "help me pls" flag. 🧚

🌈 SEE ALSO 🌈

go read these next, bestie, they're in the same friend group:

• kdestroy(1)
• kinit(1)

and that's the whole page!! mwah 💖

this lil manual came from HEIMDAL and it's dated October 6, 2005 — yeah she's vintage, she's an elder, and she still ate. 🌸✨🎀