KLIST(1)

👑 klist(1) — list cached Kerberos tickets 💅

okay bestie, so this is a MIT Kerberos manual page, and it's genuinely one of the more iconic ones. sit down, grab a strawberry 🍓, and let's get into it.

---

✨ NAME ✨

klist — list cached Kerberos tickets

---

🦋 SYNOPSIS 🦋

klist [-e] [[-c] [-l] [-A] [-f] [-s] [-a [-n]]] [-C] [-k [-i] [-t] [-K]]
[-V] [-d] [cache_name|keytab_name]

---

💖 DESCRIPTION 💖

so basically klist lists the Kerberos principal and the Kerberos tickets held in a credentials cache, OR the keys held in a keytab file. that's it. that's the whole vibe. it's the "who am I and what do I have" command of the Kerberos world, no cap. 🔥

---

🌸 OPTIONS 🌸

• -e — shows the encryption types of the session key and the ticket for each credential in the credential cache, or each key in the keytab file. like, what kind of crypto are we dealing with here 👀
• -l — if a cache collection is available, it displays a table summarizing the caches present in the collection. a little menu of your caches, slay.
• -A — if a cache collection is available, it displays the contents of all of the caches in the collection. all of them. the whole collection. main character energy ✨
• -c — list tickets held in a credentials cache. this is the default if neither -c nor -k is specified, so if you're not sure what you want, this is what you're getting 💅
• -f — shows the flags present in the credentials, using these abbreviations:

F    Forwardable
f    forwarded
P    Proxiable
p    proxy
D    postDateable
d    postdated
R    Renewable
I    Initial
i    invalid
H    Hardware authenticated
A    preAuthenticated
T    Transit policy checked
O    Okay as delegate
a    anonymous

yes, the capital/lowercase thing matters. F and f are literally two different flags. lowercase is giving "the vibe is off" energy 💀

• -s — makes klist run silently (produce no output). it will exit with status 1 if the credentials cache cannot be read or is expired, and with status 0 otherwise. perfect for scripts who just want a yes/no, no drama 🎀
• -a — display the list of addresses in credentials.
• -n — show numeric addresses instead of reverse-resolving addresses. no DNS side quests, just the raw numbers 🔢
• -C — list configuration data that has been stored in the credentials cache when klist encounters it. by default, configuration data is not listed, so this is the "oh, there was more in there?" option 🙈
• -k — list keys held in a keytab file. switching gears from tickets to keys, we contain multitudes 🧚
• -i — in combination with -k, defaults to using the default client keytab instead of the default acceptor keytab, if no name is given.
• -t — display the time entry timestamps for each keytab entry in the keytab file. timestamps, we love a timestamp ⭐
• -K — display the value of the encryption key in each keytab entry in the keytab file.

bestie. this prints actual key material. it's literally in the manual so I'm telling you: be careful who's shoulder-surfing when you run this. 😭

• -d — display the authdata types (if any) for each entry.
• -V — display the Kerberos version number and exit. short, sweet, iconic 🌈

---

if cache_name or keytab_name is not specified, klist will display the credentials in the default credentials cache or keytab file as appropriate. and if the KRB5CCNAME environment variable is set, its value is used to locate the default ticket cache. so yeah, env vars can absolutely change which cache you're looking at. iykyk 💜

---

🌟 ENVIRONMENT 🌟

see kerberos for a description of Kerberos environment variables. that's it, that's the section, it's a pointer and honestly? valid.

---

🎀 FILES 🎀

• FILE:/tmp/krb5cc_%{uid} — default location of Kerberos 5 credentials cache
• FILE:/etc/krb5.keytab — default location for the local host's keytab file

---

🫶 SEE ALSO 🫶

kinit, kdestroy, kerberos

(the holy trinity of "get a ticket, lose a ticket, read the lore")

---

💜 AUTHOR 💜

MIT

---

⭐ COPYRIGHT ⭐

1985-2025, MIT

---

okay that's the whole page, you ate that 🍓✨ this was klist(1) from MIT Kerberos, version 1.22.1 — go forth and list your tickets, bestie 💅👑