oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Add how-to-test example to kimpersonate.8

Browse Source
This commit is contained in:
Nicolas Williams
2016-08-05 12:47:22 -05:00
parent ab61e1d395
commit 0561396c0a
1 changed files with 13 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
kuser/kimpersonate.8
View File

@@ -58,8 +58,9 @@
The The
.Nm .Nm
program creates a "fake" ticket using the service-key of the service and program creates a "fake" ticket using the service-key of the service and
stores it in the given (or default) ccache. The service key can be read stores it in the given (or default) ccache. This is useful for testing.
from a Kerberos 5 keytab or AFS KeyFile. Supported options: The service key can be read from a Kerberos 5 keytab or AFS KeyFile.
Supported options:
.Bl -tag -width Ds .Bl -tag -width Ds
.It Fl Fl ccache= Ns Ar string .It Fl Fl ccache= Ns Ar string
ccache into which to store the ticket ccache into which to store the ticket
@@ -112,6 +113,16 @@ or for debugging.
will create a Kerberos 5 ticket for lha@E.KTH.SE for the host will create a Kerberos 5 ticket for lha@E.KTH.SE for the host
hummel.e.kth.se if there exists a keytab entry for it in hummel.e.kth.se if there exists a keytab entry for it in
.Pa /etc/krb5.keytab . .Pa /etc/krb5.keytab .
.Pp
In combination with the
.Nm ktutil
command, this is useful for testing. For example,
.Pp
.Nm ktutil
-k tkt add -p host/foo.test@TEST -V2 -e aes256-cts-hmac-sha1-96 -r
.Pp
.Nm
--cache=tcc -s host/foo.test@TEST -c jdoe@TEST -k tkt --referral
.Sh SEE ALSO .Sh SEE ALSO
.Xr kinit 1 , .Xr kinit 1 ,
.Xr klist 1 .Xr klist 1