kvno - print key version numbers of Kerberos principals
kvno [-h] [-P] [-q] [-c ccache] [-e etype] [-S sname] [-U for_user] princ_host [princ_host ...]
kvno acquires a service ticket for the specified Kerberos principals and prints out the key version numbers of each.
The following options are supported:
Specify the name of a credentials cache to use, if not the default.
Specify the enctype to be requested for the session key of all the services named on the command line.
This is useful in certain backward compatibility situations.
Print a usage statement and exit.
Specify that the princ_host arguments are to be treated as services for which credentials should be acquired using constrained delegation.
This option is only valid when used in conjunction with protocol transition.
Specify that krb5_sname_to_principal() is used to build principal names. If this flag is specified, the princ_host arguments are interpreted as host names (rather than principal names), and sname is interpreted as the service name.
Specify that protocol transition (S4U2Self) is to be used to acquire a ticket on behalf of for_user.
If constrained delegation is not requested, the service name must match the credentials cache client principal.
The following operand is supported:
If the –S option is specified, specifies either the principal name or host name, of the target principal for which to obtain the key version number.
See environ(5) for descriptions of the following environment variables that affect the execution of kvno: LANG, LC_ALL , LC_CTYPE, LC_MESSAGES, and NLSPATH.
Location of the credentials (ticket) cache.
Default location of the credentials cache. uid is the decimal UID of the user.
See attributes(5) for descriptions of the following attributes: