1KVNO(1) General Commands Manual KVNO(1)
2
3
4
6 kvno - print key version numbers of Kerberos principals
7
9 kvno [-q] [-h] [-c ccache] [-e etype] service1 service2 ...
10
12 Kvno acquires a service ticket for the specified Kerberos principals
13 and prints out the key version numbers of each.
14
16 -c ccache
17 specifies the name of a credentials cache to use (if not the
18 default)
19
20 -e etype
21 specifies the enctype which will be requested for the session
22 key of all the services named on the command line. This is use‐
23 ful in certain backward compatibility situations.
24
25 -q suppress printing
26
27 -h prints a usage statement and exits
28
29 -P specifies that the service1 service2 ... arguments are to be
30 treated as services for which credentials should be acquired
31 using constrained delegation. This option is only valid when
32 used in conjunction with protocol transition.
33
34 -S sname
35 specifies that krb5_sname_to_principal() will be used to build
36 principal names. If this flag is specified, the service1 ser‐
37 vice2 ... arguments are interpreted as hostnames (rather than
38 principal names), and sname is interpreted as the service name.
39
40 -U for_user
41 specifies that protocol transition (S4U2Self) is to be used to
42 acquire a ticket on behalf of for_user. If constrained delega‐
43 tion is not requested, the service name must match the creden‐
44 tials cache client principal.
45
47 Kvno uses the following environment variable:
48
49 KRB5CCNAME Location of the credentials (ticket) cache.
50
52 /tmp/krb5cc_[uid] default location of the credentials cache ([uid] is
53 the decimal UID of the user).
54
56 kinit(1), kdestroy(1), krb5(3)
57
58
59
60 KVNO(1)