klist - Kerberos display entries in credentials cache and keytab

klist allows the user to view entries in the local credentials cache and key table.


klist [ commands ]


klist displays the entries in the local credentials cache and key table. After the user has modified the credentials cache with kinit or modified the keytab with ktab, the only way to verify the changes is to view the contents of the credentials cache and/or keytab using klist. klist does not change the Kerberos database.


Usage: klist [ [-c] [-f] [-e] [-a [-n]] ] [-k [-t] [-K] ] [<name>] [-help]

Command Option Description
-c Specifies that the credential cache entries are to be listed.
-k Specifies that the key tab entries are to be listed.
<name> Specifies the credential cache name or the keytab name. If the name is not specified default values for cache name and the keytab are used. The default values for the cache and the keytab are specified in the man page for kinit.
-help Displays instructions.
If the -c option is specified (options for credential cache)
Comman Option Description
-f Shows credentials flags.
-e Shows the encryption type.
-a Shows addresses.
-n If -a is specified, do not reverse resolve addresses.
If the -k option is specified (options available for keytabs)
Command Option Description
-t Shows keytab entry timestamps.
-K Shows keytab entry DES keys. -K Shows keytab entry key type.


List entries in the keytable specified including keytab entry timestamps and DES keys:

      klist -k -t -K FILE:\temp\mykrb5cc

List entries in the credentials cache specified including credentials flag and address list:

      klist -c -f FILE:\temp\mykrb5cc

Copyright © 1993, 2020, Oracle and/or its affiliates. All rights reserved.