TOKENS(1)

📦
version 1.8.16.1 · 10 versions
, in ubuntu stonking

👑 TOKENS(1) — the AFS Command Reference glow-up 💅

okay bestie, so tokens and tokens.krb are the lil commands that show you the issuer's tokens. yes this is a whole manpage, and yes it's lowkey iconic. let's get into it 🦋

✨ NAME ✨

tokens, tokens.krb — displays the issuer's tokens 💖

✨ SYNOPSIS ✨

tokens [-help]

tokens [-h]

tokens.krb [-help]

tokens.krb [-h]

that's it. four ways in. pick your fighter 🎀

💜 DESCRIPTION 💜

So the tokens command displays all tokens (tickets) cached on the local machine for the issuer. That's the whole vibe check right there.

And fr fr this matters, because AFS server processes require that their clients present a token as evidence that they have authenticated in the server's local cell. no token, no service, periodt. 🔥

Then there's tokens.krb — the (mostly obsolete) version. It's the same as tokens, except it also displays the user's Kerberos v4 ticket cache. Mostly obsolete, so don't get too attached, but she's still there 💀

🌸 OPTIONS 🌸

  • -help — prints the online help for this command. and heads up: all other valid options are ignored when you use this, so don't bother stacking them 🙈
also for the record, -h is a listed synopsis form, iykyk 👑

🦋 OUTPUT 🦋

The output lists one token for each cell in which the user is authenticated. so if you're in three cells, bestie, you're getting three lines. slay 💅

The output indicates the:

  • User's AFS UID, if it is available for display.
  • Server for which the token is valid (normally, afs). This includes a cell specification.
  • Day and time the token expires.

The output of the Kerberos version of this command, tokens.krb, also reports the following about the Kerberos ticket-granting ticket: the ticket owner, which Kerberos ticket-granting service that issued the ticket (for example, "krbtgt.EXAMPLE.COM"), and ticket's expiration date. 💖

The string --End of list-- appears at the end of the output. If the user is not authenticated in any cell, this line is all that appears. just one sad little line. it's giving minimalism 💀

🌈 EXAMPLES 🌈

Example 1: no auth, no tokens, no vibes

The following example shows the output when the issuer is not authenticated in any cell.

% tokens
Tokens held by the Cache Manager:

   --End of list--

Example 2: one cell, one token, main character energy ✨

The following example shows the output when the issuer is authenticated in Example Corporation cell, where he or she has AFS UID 1000.

% tokens
Tokens held by the Cache Manager:

User's (AFS ID 1000) tokens for afs@example.com [Expires Jan 2 10:00]
   --End of list--

Example 3: three cells, three UIDs, one expired token 😭

The following example shows the output when the issuer is authenticated in the Example Corporation cell, the Example Organization cell, and the Example Network cell. The user has different AFS UIDs in the three cells. Tokens for last cell are expired:

% tokens
Tokens held by the Cache Manager:

User's (AFS ID 1000) tokens for afs@example.com [Expires Jan 3 10:00]
User's (AFS ID 4286) tokens for afs@example.org [Expires Jan 3 1:34]
User's (AFS ID 22) tokens for afs@example.net [>>Expired<]
   --End of list--

see that [>>Expired<]? that's the expired one, bestie. she's done. 😭

Example 4: tokens.krb era

The following example shows the output when the issuer uses the tokens.krb version of the command after authenticating in the Example Corporation cell using the klog.krb command.

% tokens.krb
Tokens held by the Cache Manager:

User's (AFS ID 1000) tokens for afs@example.com [Expires Jan 31 00:09]
User smiths tokens for krbtgt.EXAMPLE.COM@example.com [Expires Jan 31 00:09]
   --End of list--

look at that extra Kerberos line. she's showing off. obsessed 🫶

⭐ PRIVILEGE REQUIRED ⭐

None — literally zero privilege needed. everyone's invited to the party. 🎀

🧚 SEE ALSO 🧚

go read those next, bestie, they're the whole ecosystem 🔥

IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.

This documentation is covered by the IBM Public License Version 1.0. It was converted from HTML to POD by software written by Chas Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.

that's the whole page, no cap. this was brought to you by OpenAFS, dated 2026-07-27 — and honestly? iconic of them. 💖✨🦋

📦 where this page comes from