summaryrefslogtreecommitdiff
path: root/kerberosIV/kauth/kauth.1
blob: 3c32f764086d556a7356e1e7cfa66cd7b2d8421b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
.\" $Id: kauth.1,v 1.2 1998/12/15 01:20:51 aaron Exp $
.\"
.Dd May 4, 1996
.Dt KAUTH 1
.Os KTH-KRB
.Sh NAME
.Nm kauth
.Nd
overworked Kerberos login program
.Sh SYNOPSIS
.Nm kauth
.Op Fl n Ar name
.Op Fl r Ar remote user
.Op Fl t Pa remote ticket file
.Op Fl h Ar hosts...
.Op Fl l Ar lifetime
.Op Fl f Pa srvtab
.Op Fl c Ar cell
.Op Ar command ...
.Sh DESCRIPTION
The
.Nm
command obtains ticket granting tickets as well as AFS ticket and
tokens. It also does a whole lot of other stuff.
.Pp
The following flags are supported:
.Bl -tag -width xxxx
.It Fl n
Principal to get tickets for. If no other arguments are present this
can be given without the
.Fl n
flag.
.It Fl h
Remote hosts to obtain tickets for. This works similar to the MIT
Athena Kerberos 4 patchlevel 10 command
.Xr rkinit 1 ,
however not in a compatible way. It requires that the remote host runs
the
.Xr kauthd 8 ,
server. The 
.Fl r
and
.Fl t
flags are useful only with this option.
.It Fl r
User on the remote host that should own the ticket file.
.It Fl t 
Ticket file on remote host.
.It Fl l
Lifetime of tickets in minutes. A value of -1 is used for maximum
ticket lifetime.
.It Fl f
Srvtab to get service keys from. Default is 
.Pa /etc/kerberosIV/srvtab .
This is mainly used with batch services that need to run
authenticated. If any command is given, it will be executed in an
authenticated fashion and when the program exits the tickets are
destroyed. For long running jobs the tickets will be renewed.
.It Fl c
AFS cell to get tokens for, default is your local cell.
.El
.Sh SEE ALSO
.Xr kinit 1 ,
.Xr kauthd 8
.Sh BUGS
There is no help-switch.