kvno - print key version numbers of Kerberos principals
kvno [-q] [-h] [-c ccache] [-e etype] service1 service2 ...
Kvno acquires a service ticket for the specified Kerberos principals
and prints out the key version numbers of each.
specifies the name of a credentials cache to use (if not the
specifies the enctype which will be requested for the session
key of all the services named on the command line. This is
useful in certain backward compatibility situations.
-q suppress printing
-h prints a usage statement and exits
-P specifies that the service1 service2 ... arguments are to be
treated as services for which credentials should be acquired
using constrained delegation. This option is only valid when
used in conjunction with protocol transition.
specifies that krb5_sname_to_principal() will be used to build
principal names. If this flag is specified, the service1
service2 ... arguments are interpreted as hostnames (rather
than principal names), and sname is interpreted as the service
specifies that protocol transition (S4U2Self) is to be used to
acquire a ticket on behalf of for_user. If constrained
delegation is not requested, the service name must match the
credentials cache client principal.
Kvno uses the following environment variable:
KRB5CCNAME Location of the credentials (ticket) cache.
/tmp/krb5cc_[uid] default location of the credentials cache ([uid] is
the decimal UID of the user).
kinit(1), kdestroy(1), krb5(3)