KINIT(1) 4.0 KINIT(1) NNAAMMEE kinit - Kerberos login utility SSYYNNOOPPSSIISS kkiinniitt [ --iirrvvll ] DDEESSCCRRIIPPTTIIOONN The _k_i_n_i_t command is used to login to the Kerberos authenti- cation and authorization system. Note that only registered Kerberos users can use the Kerberos system. For information about registering as a Kerberos user, see the _k_e_r_b_e_r_o_s(_1) manual page. If you are logged in to a workstation that is running the _t_o_e_h_o_l_d service, you do not have to use _k_i_n_i_t. The _t_o_e_h_o_l_d login procedure will log you into Kerberos automatically. You will need to use _k_i_n_i_t only in those situations in which your original tickets have expired. (Tickets expire in about a day.) Note as well that _t_o_e_h_o_l_d will automatically destroy your tickets when you logout from the workstation. When you use _k_i_n_i_t without options, the utility prompts for your username and Kerberos password, and tries to authenti- cate your login with the local Kerberos server. If Kerberos authenticates the login attempt, _k_i_n_i_t retrieves your initial ticket and puts it in the ticket file specified by your KRBTKFILE environment variable. If this variable is undefined, your ticket will be stored in the /_t_m_p directory, in the file _t_k_t_u_i_d , where _u_i_d specifies your user identifi- cation number. If you have logged in to Kerberos without the benefit of the workstation _t_o_e_h_o_l_d system, make sure you use the _k_d_e_s_t_r_o_y command to destroy any active tickets before you end your login session. You may want to put the _k_d_e_s_t_r_o_y command in your ._l_o_g_o_u_t file so that your tickets will be destroyed automatically when you logout. The options to _k_i_n_i_t are as follows: --ii _k_i_n_i_t prompts you for a Kerberos instance. --rr _k_i_n_i_t prompts you for a Kerberos realm. This option lets you authenticate yourself with a remote Kerberos server. --vv Verbose mode. _k_i_n_i_t prints the name of the ticket file used, and a status message indicating the suc- cess or failure of your login attempt. --ll _k_i_n_i_t prompts you for a ticket lifetime in minutes. Printed 7/27/90 Kerberos 1 KINIT(1) 4.0 KINIT(1) Due to protocol restrictions in Kerberos Version 4, this value must be between 5 and 1275 minutes. SSEEEE AALLSSOO kerberos(1), kdestroy(1), klist(1), toehold(1) BBUUGGSS The --rr option has not been fully implemented. AAUUTTHHOORRSS Steve Miller, MIT Project Athena/Digital Equipment Corpora- tion Clifford Neuman, MIT Project Athena Printed 7/27/90 Kerberos 2