1KVNO(1) MIT Kerberos KVNO(1)
2
3
4
6 kvno - print key version numbers of Kerberos principals
7
9 kvno [-c ccache] [-e etype] [-q] [-h] [-P] [-S sname] [-U for_user]
10 service1 service2 ...
11
13 kvno acquires a service ticket for the specified Kerberos principals
14 and prints out the key version numbers of each.
15
17 -c ccache
18 Specifies the name of a credentials cache to use (if not the
19 default)
20
21 -e etype
22 Specifies the enctype which will be requested for the session
23 key of all the services named on the command line. This is use‐
24 ful in certain backward compatibility situations.
25
26 -q Suppress printing output when successful. If a service ticket
27 cannot be obtained, an error message will still be printed and
28 kvno will exit with nonzero status.
29
30 -h Prints a usage statement and exits.
31
32 -P Specifies that the service1 service2 ... arguments are to be
33 treated as services for which credentials should be acquired
34 using constrained delegation. This option is only valid when
35 used in conjunction with protocol transition.
36
37 -S sname
38 Specifies that the service1 service2 ... arguments are inter‐
39 preted as hostnames, and the service principals are to be con‐
40 structed from those hostnames and the service name sname. The
41 service hostnames will be canonicalized according to the usual
42 rules for constructing service principals.
43
44 -U for_user
45 Specifies that protocol transition (S4U2Self) is to be used to
46 acquire a ticket on behalf of for_user. If constrained delega‐
47 tion is not requested, the service name must match the creden‐
48 tials cache client principal.
49
51 kvno uses the following environment variable:
52
53 KRB5CCNAME
54 Location of the credentials (ticket) cache.
55
57 FILE:/tmp/krb5cc_%{uid}
58 Default location of the credentials cache
59
61 kinit(1), kdestroy(1)
62
64 MIT
65
67 1985-2017, MIT
68
69
70
71
721.15.1 KVNO(1)