.\"
.\" This source code is no longer held under any constraint of USA
.\" `cryptographic laws' since it was exported legally.  The cryptographic
.\" functions were removed from the code and a "Bones" distribution was
.\" made.  A Commodity Jurisdiction Request #012-94 was filed with the
.\" USA State Department, who handed it to the Commerce department.  The
.\" code was determined to fall under General License GTDA under ECCN 5D96G,
.\" and hence exportable.  The cryptographic interfaces were re-added by Eric
.\" Young, and then KTH proceeded to maintain the code in the free world.
.\"
.\"Copyright (C) 1989 by the Massachusetts Institute of Technology
.\"
.\"Export of this software from the United States of America is assumed
.\"to require a specific license from the United States Government.
.\"It is the responsibility of any person or organization contemplating
.\"export to obtain such a license before exporting.
.\"
.\"WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
.\"distribute this software and its documentation for any purpose and
.\"without fee is hereby granted, provided that the above copyright
.\"notice appear in all copies and that both that copyright notice and
.\"this permission notice appear in supporting documentation, and that
.\"the name of M.I.T. not be used in advertising or publicity pertaining
.\"to distribution of the software without specific, written prior
.\"permission.  M.I.T. makes no representations about the suitability of
.\"this software for any purpose.  It is provided "as is" without express
.\"or implied warranty.
.\"
.\"	$OpenBSD: klist.1,v 1.4 1998/02/25 15:51:01 art Exp $
.TH KLIST 1 "Kerberos Version 4.0" "MIT Project Athena"
.SH NAME
klist \- list currently held Kerberos tickets
.SH SYNOPSIS
.B klist
[
\fB\-s \fR|\fB \-t\fR
] [
.B \-file
name ] [
.B \-srvtab
]
.br
.SH DESCRIPTION
.I klist
prints the name of the tickets file and the
identity of the principal the tickets are for (as listed in the
tickets file), and 
lists the principal names of all Kerberos tickets currently held by
the user, along with the issue and expire time for each authenticator.
Principal names are listed in the form
.I name.instance@realm,
with the '.' omitted if the instance is null,
and the '@' omitted if the realm is null.

If given the
.B \-s
option,
.I klist
does not print the issue and expire times, the name of the tickets file,
or the identity of the principal.

If given the
.B \-t
option, 
.B klist
checks for the existence of a non-expired ticket-granting-ticket in the
ticket file.  If one is present, it exits with status 0, else it exits
with status 1.  No output is generated when this option is specified. 

If given the
.B \-file
option, the following argument is used as the ticket file.
Otherwise, if the
.B KRBTKFILE
environment variable is set, it is used.
If this environment variable
is not set, the file
.B /tmp/tkt[uid]
is used, where
.B uid
is the current user-id of the user.

If given the
.B \-srvtab
option, the file is treated as a service key file, and the names of the
keys contained therein are printed.  If no file is
specified with a
.B \-file
option, the default is
.IR /etc/srvtab .
.SH FILES
.TP 2i
/etc/krb.conf
to get the name of the local realm
.TP
/tmp/tkt[uid]
as the default ticket file ([uid] is the decimal UID of the user).
.TP
/etc/srvtab
as the default service key file
.SH SEE ALSO
.PP
kerberos(1), kinit(1), kdestroy(1)
.SH BUGS
When reading a file as a service key file, very little sanity or error
checking is performed.