KDIGEST(8)

💖 NAME 💖

okay so bestie, <rainbow>kdigest</rainbow> — it's the userland tool that lets you get at the digest interface living inside the KDC. That's it, that's the whole vibe. 🫶

---

✨ SYNOPSIS ✨

kdigest [--ccache=string] [--version] [--help] command [arguments]

like every good tool: you give it a command, the command gets arguments, the flags are optional, we love structure 💅

---

🦋 DESCRIPTION 🦋

So the whole thing is: you pick a command, and the command has its own lil set of flags. Global flags go before the command, command flags go after. Simple. Iconic. No notes.

🎀 Supported options 🎀

these are the top-level ones, the ones that live on kdigest itself:

• --ccache=string — credential cache
• --version — print version
• --help — (the manpage gives this one no description at all, and honestly? it's giving mysterious. not gonna invent lore for it tho 🙈)

🌸 Available commands 🌸

okay so there are five of them and they're all kinda specific but we move

digest-probe

digest-probe [--realm=string] [-h | --help]

• --realm=string — Kerberos realm to communicate with
• -h, --help — (again: no description in the source. keeping it 100, we're not making one up 💀)

digest-server-init

digest-server-init [--type=string] [--kerberos-realm=realm]
        [--digest=digest-type] [--cb-type=type] [--cb-value=value]
        [--hostname=hostname] [--realm=string]

• --type=string — digest type
• --kerberos-realm=realm — (no description given, it's just sitting there being a realm 🧚)
• --digest=digest-type — digest type to use in the algorithm
• --cb-type=type — type of channel bindings
• --cb-value=value — value of channel bindings
• --hostname=hostname — hostname of the server
• --realm=string — Kerberos realm to communicate with

digest-server-request

digest-server-request [--type=string] [--kerberos-realm=realm]
        [--username=name] [--server-nonce=nonce]
        [--server-identifier=nonce] [--client-nonce=nonce]
        [--client-response=response] [--opaque=string]
        [--authentication-name=name] [--realm=realm] [--method=method]
        [--uri=uri] [--nounce-count=count] [--qop=qop] [--ccache=ccache]

• --type=string — digest type
• --kerberos-realm=realm — (no description, it's just vibing)
• --username=name — digest type (yes. the manpage literally says "digest type" here. we are NOT fixing it. the source said it, we said it, periodt 💅)
• --server-nonce=nonce — (no description)
• --server-identifier=nonce — (no description)
• --client-nonce=nonce — (no description)
• --client-response=response — (no description)
• --opaque=string — (no description)
• --authentication-name=name — (no description)
• --realm=realm — (no description)
• --method=method — (no description)
• --uri=uri — (no description)
• --nounce-count=count — (no description — and yeah, it's spelled nounce, that's the real name, don't @ me ✨)
• --qop=qop — (no description)
• --ccache=ccache — Where the the credential cache is created when the KDC returns tickets (that doubled "the the" is straight from the source, and we are preserving it like a museum piece 🎀)

digest-client-request

digest-client-request [--type=string] [--username=name]
        [--password=password] [--server-nonce=nonce]
        [--server-identifier=nonce] [--client-nonce=nonce]
        [--opaque=string] [--realm=realm] [--method=method] [--uri=uri]
        [--nounce-count=count] [--qop=qop]

• --type=string — digest type
• --username=name — digest type (same energy as before, same exact wording, we keep it fr fr)
• --password=password — (no description)
• --server-nonce=nonce — (no description)
• --server-identifier=nonce — (no description)
• --client-nonce=nonce — (no description)
• --opaque=string — (no description)
• --realm=realm — (no description)
• --method=method — (no description)
• --uri=uri — (no description)
• --nounce-count=count — (no description, still spelled nounce 🦋)
• --qop=qop — (no description)

ntlm-server-init

ntlm-server-init [--version=integer] [--kerberos-realm=string]

• --version=integer — ntlm version
• --kerberos-realm=string — Kerberos realm to communicate with

real talk bestie: a bunch of these flags ship with literally zero explanation in the original page, and I'm not about to make stuff up about them. if the manpage doesn't say it, I don't say it. lowkey a rule, highkey a personality trait 💛

---

and that's the whole page!! every flag, every argument, every weird little typo, all accounted for. nothing skipped, nothing invented. you're welcome, you're doing amazing, go read a credential cache or something 👑

🌸✨ sign-off time ✨🌸

this beauty came out of HEIMDAL, dated September 25, 2008 — yeah she's an elder but she still ate 💅 mwah, bye bestie! 🫶💖