kvno(1)

Name

kvno - print key version numbers of Kerberos principals

Synopsis

kvno [-h] [-P] [-q] [-c ccache] [-e etype] [-S sname] 
     [-U for_user] princ_host [princ_host ...]

Description

kvno acquires a service ticket for the specified Kerberos principals and prints out the key version numbers of each.

Options

The following options are supported:

–c ccache

Specify the name of a credentials cache to use, if not the default.

–e etype

Specify the enctype to be requested for the session key of all the services named on the command line.

This is useful in certain backward compatibility situations.

–h

Print a usage statement and exit.

–P

Specify that the princ_host arguments are to be treated as services for which credentials should be acquired using constrained delegation.

This option is only valid when used in conjunction with protocol transition.

–q

Suppress printing.

–S sname

Specify that krb5_sname_to_principal() is used to build principal names. If this flag is specified, the princ_host arguments are interpreted as host names (rather than principal names), and sname is interpreted as the service name.

–U for_user

Specify that protocol transition (S4U2Self) is to be used to acquire a ticket on behalf of for_user.

If constrained delegation is not requested, the service name must match the credentials cache client principal.

Operands

The following operand is supported:

princ_host

If the –S option is specified, specifies either the principal name or host name, of the target principal for which to obtain the key version number.

Environment Variables

See environ(5) for descriptions of the following environment variables that affect the execution of kvno: LANG, LC_ALL , LC_CTYPE, LC_MESSAGES, and NLSPATH.

KRB5CCNAME

Location of the credentials (ticket) cache.

Files

/tmp/krb5cc_[uid]

Default location of the credentials cache. uid is the decimal UID of the user.

Attributes

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE ATTRIBUTE VALUE Availability service/security/kerberos-5 Interface Stability Committed

See also

kdestroy(1), kinit(1), attributes(5), krb5envvar(5)