Man Linux: Main Page and Category List


       kvno - print key version numbers of Kerberos principals


       kvno [-q] [-h] [-c ccache] [-e etype] service1 service2 ...


       Kvno  acquires  a  service ticket for the specified Kerberos principals
       and prints out the key version numbers of each.


       -c ccache
              specifies the name of a credentials cache to  use  (if  not  the

       -e etype
              specifies  the  enctype  which will be requested for the session
              key of all the services named on  the  command  line.   This  is
              useful in certain backward compatibility situations.

       -q     suppress printing

       -h     prints a usage statement and exits

       -P     specifies  that  the  service1 service2 ...  arguments are to be
              treated as services for which  credentials  should  be  acquired
              using  constrained  delegation.  This  option is only valid when
              used in conjunction with protocol transition.

       -S sname
              specifies that krb5_sname_to_principal() will be used  to  build
              principal  names.   If  this  flag  is  specified,  the service1
              service2 ...  arguments are  interpreted  as  hostnames  (rather
              than  principal  names), and sname is interpreted as the service

       -U for_user
              specifies that protocol transition (S4U2Self) is to be  used  to
              acquire   a  ticket  on  behalf  of  for_user.   If  constrained
              delegation is not requested, the service  name  must  match  the
              credentials cache client principal.


       Kvno uses the following environment variable:

       KRB5CCNAME      Location of the credentials (ticket) cache.


       /tmp/krb5cc_[uid]  default  location of the credentials cache ([uid] is
                          the decimal UID of the user).


       kinit(1), kdestroy(1), krb5(3)