1KDESTROY(1) General Commands Manual KDESTROY(1)
2
6 kdestroy - destroy Kerberos tickets
7
9 kdestroy [-A] [-q] [-c cache_name]
10
12 The kdestroy utility destroys the user's active Kerberos authorization
13 tickets by writing zeros to the specified credentials cache that con‐
14 tains them. If the credentials cache is not specified, the default
15 credentials cache is destroyed.
16
18 -A Destroys all caches in the collection, if a cache collection is
19 available. -q Run quietly. Normally kdestroy beeps if it fails
20 to destroy the user's tickets. The -q flag suppresses this
21 behavior.
22 -c cache_name
24 use cache_name as the credentials (ticket) cache name and loca‐
25 tion; if this option is not used, the default cache name and
26 location are used.
27 The default credentials cache may vary between systems. If the
29 KRB5CCNAME environment variable is set, its value is used to
30 name the default ticket cache.
31 Most installations recommend that you place the kdestroy command in
33 your .logout file, so that your tickets are destroyed automatically
34 when you log out.
35
37 Kdestroy uses the following environment variables:
38 KRB5CCNAME Location of the default Kerberos 5 credentials (ticket)
40 cache, in the form type:residual. If no type prefix is
41 present, the FILE type is assumed. The type of the
42 default cache may determine the availability of a cache
43 collection; for instance, a default cache of type DIR
44 causes caches within the directory to be present in the
45 collection.
46
48 /tmp/krb5cc_[uid] default location of Kerberos 5 credentials cache
49 ([uid] is the decimal UID of the user).
50
52 kinit(1), klist(1), krb5(3)
53
55 Only the tickets in the specified credentials cache are destroyed.
56 Separate ticket caches are used to hold root instance and password
57 changing tickets. These should probably be destroyed too, or all of a
58 user's tickets kept in a single credentials cache.
59 KDESTROY(1)