Skip to content

kinit

Obtain and manage Kerberos tickets for authentication, including ticket lifetimes, renewal, keytabs, and credential caches

Obtain a Kerberos ticket (default principal)

kinit

Enable verbose output

kinit -V

Request a ticket with a specific lifetime

kinit -l 10h

Set ticket start time

kinit -s 202602060900

Request a renewable ticket with maximum lifetime

kinit -r 7d

Request a forwardable ticket

kinit -f

Request a non-forwardable ticket

kinit -F

Request a proxiable ticket

kinit -p

Request a non-proxiable ticket

kinit -P

Obtain an anonymous Kerberos ticket

kinit -n

Include client addresses in the ticket

kinit -a

Do not include client addresses in the ticket

kinit -A

Validate an existing ticket

kinit -v

Renew an existing Kerberos ticket

kinit -R

Canonicalize the client principal name

kinit -C

Use enterprise principal name format

kinit -E user@example.com

Obtain a ticket using a keytab

kinit -k -t /etc/krb5.keytab principal

Use the default client keytab

kinit -k -i

Store credentials in a specific cache

kinit -c /tmp/krb5cc_custom

Request a service ticket for a specific service

kinit -S host/server.example.com

Use an existing credential cache as input

kinit -I /tmp/krb5cc_input

Use an armor credential cache (FAST)

kinit -T /tmp/krb5cc_armor

Set a Kerberos pre-authentication attribute

kinit -X otp=123456