Creating a Kerberos Ticket

If PAM is configured properly, a ticket is created automatically when you log in, and you need not do anything special to obtain a ticket. However, you might need to create a ticket if your ticket expires. Also, you might need to use a different principal besides your default principal, for example, if you use ssh -l to log in to a system as someone else.

To create a ticket, use the kinit command.

% /usr/bin/kinit

The kinit command prompts you for your password. For the full syntax of the kinit command, see the kinit(1) man page.

Example 6-1  Creating a Kerberos Ticket

This example shows a user, kdoe, creating a ticket on her own system.

% kinit
Password for kdoe@CORP.EXAMPLE.COM: xxxxxxxx

In this example, the user kdoe creates a ticket that is valid for three hours with the –l option.

% kinit -l 3h kdoe@EXAMPLE.ORG
Password for kdoe@EXAMPLE.ORG: xxxxxxxx