Use "Fl Fl" for long options.
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
This commit is contained in:
Thomas Klausner
committed by
Love Hornquist Astrand
Love Hornquist Astrand
parent
05a432aaed
commit
db8e287e41
@@ -40,12 +40,12 @@
|
||||
copy credentials from one cache to another
|
||||
.Sh SYNOPSIS
|
||||
.Nm
|
||||
.Op Fl -krbtgt-only
|
||||
.Op Fl -service= Ns Ar principal
|
||||
.Op Fl -enctype= Ns Ar enctype
|
||||
.Op Fl -flags= Ns Ar ticketflags
|
||||
.Op Fl -valid-for= Ns Ar time
|
||||
.Op Fl -fcache-version= Ns Ar integer
|
||||
.Op Fl Fl krbtgt-only
|
||||
.Op Fl Fl service= Ns Ar principal
|
||||
.Op Fl Fl enctype= Ns Ar enctype
|
||||
.Op Fl Fl flags= Ns Ar ticketflags
|
||||
.Op Fl Fl valid-for= Ns Ar time
|
||||
.Op Fl Fl fcache-version= Ns Ar integer
|
||||
.Op Aq Ar from-cache
|
||||
.Aq Ar to-cache
|
||||
.Sh DESCRIPTION
|
||||
@@ -57,20 +57,20 @@ copies credentials from
|
||||
.Pp
|
||||
Supported options:
|
||||
.Bl -tag -width Ds
|
||||
.It Fl -krbtgt-only
|
||||
.It Fl Fl krbtgt-only
|
||||
Copies only krbtgt credentials for the client's realm. This is
|
||||
equivalent to
|
||||
.Fl -service= Ns Li krbtgt/ Ns Ao Ar CLIENTREALM Ac Ns Li @ Ns Ao Ar CLIENTREALM Ac .
|
||||
.It Fl -service= Ns Ar principal
|
||||
.Fl Fl service= Ns Li krbtgt/ Ns Ao Ar CLIENTREALM Ac Ns Li @ Ns Ao Ar CLIENTREALM Ac .
|
||||
.It Fl Fl service= Ns Ar principal
|
||||
Copies only credentials matching this service principal.
|
||||
.It Fl -enctype= Ns Ar enctype
|
||||
.It Fl Fl enctype= Ns Ar enctype
|
||||
Copies only credentials a matching enctype.
|
||||
.It Fl -flags= Ns Ar ticketflags
|
||||
.It Fl Fl flags= Ns Ar ticketflags
|
||||
Copies only credentials with these ticket flags set.
|
||||
.It Fl -valid-for= Ns Ar time
|
||||
.It Fl Fl valid-for= Ns Ar time
|
||||
Copies only credentials that are valid for at least this long. This
|
||||
does not take renewable creds into account.
|
||||
.It Fl -fcache-version= Ns Ar integer
|
||||
.It Fl Fl fcache-version= Ns Ar integer
|
||||
The created cache, If a standard
|
||||
.Li FILE
|
||||
cache is created, it will have this file format version.
|
||||
|
||||
@@ -41,13 +41,13 @@
|
||||
.Nm
|
||||
.Bk -words
|
||||
.Op Fl c Ar cachefile
|
||||
.Op Fl -credential= Ns Ar principal
|
||||
.Op Fl -cache= Ns Ar cachefile
|
||||
.Op Fl A | Fl -all
|
||||
.Op Fl -no-unlog
|
||||
.Op Fl -no-delete-v4
|
||||
.Op Fl -version
|
||||
.Op Fl -help
|
||||
.Op Fl Fl credential= Ns Ar principal
|
||||
.Op Fl Fl cache= Ns Ar cachefile
|
||||
.Op Fl A | Fl Fl all
|
||||
.Op Fl Fl no-unlog
|
||||
.Op Fl Fl no-delete-v4
|
||||
.Op Fl Fl version
|
||||
.Op Fl Fl help
|
||||
.Ek
|
||||
.Sh DESCRIPTION
|
||||
.Nm
|
||||
@@ -63,11 +63,11 @@ from the credential cache if it exists.
|
||||
.It Fl cache= Ns Ar cachefile
|
||||
The cache file to remove.
|
||||
.It Fl A
|
||||
.It Fl -all
|
||||
.It Fl Fl all
|
||||
remove all credential caches.
|
||||
.It Fl -no-unlog
|
||||
.It Fl Fl no-unlog
|
||||
Do not remove AFS tokens.
|
||||
.It Fl -no-delete-v4
|
||||
.It Fl Fl no-delete-v4
|
||||
Do not remove v4 tickets.
|
||||
.El
|
||||
.Sh SEE ALSO
|
||||
|
||||
162
kuser/kdigest.8
162
kuser/kdigest.8
@@ -40,209 +40,209 @@
|
||||
userland tool to access digest interface in the KDC
|
||||
.Sh SYNOPSIS
|
||||
.Nm
|
||||
.Op Fl -ccache= Ns Ar string
|
||||
.Op Fl -version
|
||||
.Op Fl -help
|
||||
.Op Fl Fl ccache= Ns Ar string
|
||||
.Op Fl Fl version
|
||||
.Op Fl Fl help
|
||||
command
|
||||
.Op arguments
|
||||
.Sh DESCRIPTION
|
||||
Supported options:
|
||||
.Bl -tag -width Ds
|
||||
.It Xo
|
||||
.Fl -ccache= Ns Ar string
|
||||
.Fl Fl ccache= Ns Ar string
|
||||
.Xc
|
||||
credential cache
|
||||
.It Xo
|
||||
.Fl -version
|
||||
.Fl Fl version
|
||||
.Xc
|
||||
print version
|
||||
.It Xo
|
||||
.Fl -help
|
||||
.Fl Fl help
|
||||
.Xc
|
||||
.El
|
||||
.Pp
|
||||
Available commands are:
|
||||
.Bl -tag -width Ds
|
||||
.It Xo digest-probe
|
||||
.Op Fl -realm= Ns Ar string
|
||||
.Op Fl h | Fl -help
|
||||
.Op Fl Fl realm= Ns Ar string
|
||||
.Op Fl h | Fl Fl help
|
||||
.Xc
|
||||
.Bl -tag -width Ds
|
||||
.It Xo
|
||||
.Fl -realm= Ns Ar string
|
||||
.Fl Fl realm= Ns Ar string
|
||||
.Xc
|
||||
Kerberos realm to communicate with
|
||||
.El
|
||||
.It Xo digest-server-init
|
||||
.Op Fl -type= Ns Ar string
|
||||
.Op Fl -kerberos-realm= Ns Ar realm
|
||||
.Op Fl -digest= Ns Ar digest-type
|
||||
.Op Fl -cb-type= Ns Ar type
|
||||
.Op Fl -cb-value= Ns Ar value
|
||||
.Op Fl -hostname= Ns Ar hostname
|
||||
.Op Fl -realm= Ns Ar string
|
||||
.Op Fl Fl type= Ns Ar string
|
||||
.Op Fl Fl kerberos-realm= Ns Ar realm
|
||||
.Op Fl Fl digest= Ns Ar digest-type
|
||||
.Op Fl Fl cb-type= Ns Ar type
|
||||
.Op Fl Fl cb-value= Ns Ar value
|
||||
.Op Fl Fl hostname= Ns Ar hostname
|
||||
.Op Fl Fl realm= Ns Ar string
|
||||
.Xc
|
||||
.Bl -tag -width Ds
|
||||
.It Xo
|
||||
.Fl -type= Ns Ar string
|
||||
.Fl Fl type= Ns Ar string
|
||||
.Xc
|
||||
digest type
|
||||
.It Xo
|
||||
.Fl -kerberos-realm= Ns Ar realm
|
||||
.Fl Fl kerberos-realm= Ns Ar realm
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -digest= Ns Ar digest-type
|
||||
.Fl Fl digest= Ns Ar digest-type
|
||||
.Xc
|
||||
digest type to use in the algorithm
|
||||
.It Xo
|
||||
.Fl -cb-type= Ns Ar type
|
||||
.Fl Fl cb-type= Ns Ar type
|
||||
.Xc
|
||||
type of channel bindings
|
||||
.It Xo
|
||||
.Fl -cb-value= Ns Ar value
|
||||
.Fl Fl cb-value= Ns Ar value
|
||||
.Xc
|
||||
value of channel bindings
|
||||
.It Xo
|
||||
.Fl -hostname= Ns Ar hostname
|
||||
.Fl Fl hostname= Ns Ar hostname
|
||||
.Xc
|
||||
hostname of the server
|
||||
.It Xo
|
||||
.Fl -realm= Ns Ar string
|
||||
.Fl Fl realm= Ns Ar string
|
||||
.Xc
|
||||
Kerberos realm to communicate with
|
||||
.El
|
||||
.It Xo digest-server-request
|
||||
.Op Fl -type= Ns Ar string
|
||||
.Op Fl -kerberos-realm= Ns Ar realm
|
||||
.Op Fl -username= Ns Ar name
|
||||
.Op Fl -server-nonce= Ns Ar nonce
|
||||
.Op Fl -server-identifier= Ns Ar nonce
|
||||
.Op Fl -client-nonce= Ns Ar nonce
|
||||
.Op Fl -client-response= Ns Ar response
|
||||
.Op Fl -opaque= Ns Ar string
|
||||
.Op Fl -authentication-name= Ns Ar name
|
||||
.Op Fl -realm= Ns Ar realm
|
||||
.Op Fl -method= Ns Ar method
|
||||
.Op Fl -uri= Ns Ar uri
|
||||
.Op Fl -nounce-count= Ns Ar count
|
||||
.Op Fl -qop= Ns Ar qop
|
||||
.Op Fl -ccache= Ns Ar ccache
|
||||
.Op Fl Fl type= Ns Ar string
|
||||
.Op Fl Fl kerberos-realm= Ns Ar realm
|
||||
.Op Fl Fl username= Ns Ar name
|
||||
.Op Fl Fl server-nonce= Ns Ar nonce
|
||||
.Op Fl Fl server-identifier= Ns Ar nonce
|
||||
.Op Fl Fl client-nonce= Ns Ar nonce
|
||||
.Op Fl Fl client-response= Ns Ar response
|
||||
.Op Fl Fl opaque= Ns Ar string
|
||||
.Op Fl Fl authentication-name= Ns Ar name
|
||||
.Op Fl Fl realm= Ns Ar realm
|
||||
.Op Fl Fl method= Ns Ar method
|
||||
.Op Fl Fl uri= Ns Ar uri
|
||||
.Op Fl Fl nounce-count= Ns Ar count
|
||||
.Op Fl Fl qop= Ns Ar qop
|
||||
.Op Fl Fl ccache= Ns Ar ccache
|
||||
.Xc
|
||||
.Bl -tag -width Ds
|
||||
.It Xo
|
||||
.Fl -type= Ns Ar string
|
||||
.Fl Fl type= Ns Ar string
|
||||
.Xc
|
||||
digest type
|
||||
.It Xo
|
||||
.Fl -kerberos-realm= Ns Ar realm
|
||||
.Fl Fl kerberos-realm= Ns Ar realm
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -username= Ns Ar name
|
||||
.Fl Fl username= Ns Ar name
|
||||
.Xc
|
||||
digest type
|
||||
.It Xo
|
||||
.Fl -server-nonce= Ns Ar nonce
|
||||
.Fl Fl server-nonce= Ns Ar nonce
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -server-identifier= Ns Ar nonce
|
||||
.Fl Fl server-identifier= Ns Ar nonce
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -client-nonce= Ns Ar nonce
|
||||
.Fl Fl client-nonce= Ns Ar nonce
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -client-response= Ns Ar response
|
||||
.Fl Fl client-response= Ns Ar response
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -opaque= Ns Ar string
|
||||
.Fl Fl opaque= Ns Ar string
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -authentication-name= Ns Ar name
|
||||
.Fl Fl authentication-name= Ns Ar name
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -realm= Ns Ar realm
|
||||
.Fl Fl realm= Ns Ar realm
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -method= Ns Ar method
|
||||
.Fl Fl method= Ns Ar method
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -uri= Ns Ar uri
|
||||
.Fl Fl uri= Ns Ar uri
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -nounce-count= Ns Ar count
|
||||
.Fl Fl nounce-count= Ns Ar count
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -qop= Ns Ar qop
|
||||
.Fl Fl qop= Ns Ar qop
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -ccache= Ns Ar ccache
|
||||
.Fl Fl ccache= Ns Ar ccache
|
||||
.Xc
|
||||
Where the the credential cache is created when the KDC returns tickets
|
||||
.El
|
||||
.It Xo digest-client-request
|
||||
.Op Fl -type= Ns Ar string
|
||||
.Op Fl -username= Ns Ar name
|
||||
.Op Fl -password= Ns Ar password
|
||||
.Op Fl -server-nonce= Ns Ar nonce
|
||||
.Op Fl -server-identifier= Ns Ar nonce
|
||||
.Op Fl -client-nonce= Ns Ar nonce
|
||||
.Op Fl -opaque= Ns Ar string
|
||||
.Op Fl -realm= Ns Ar realm
|
||||
.Op Fl -method= Ns Ar method
|
||||
.Op Fl -uri= Ns Ar uri
|
||||
.Op Fl -nounce-count= Ns Ar count
|
||||
.Op Fl -qop= Ns Ar qop
|
||||
.Op Fl Fl type= Ns Ar string
|
||||
.Op Fl Fl username= Ns Ar name
|
||||
.Op Fl Fl password= Ns Ar password
|
||||
.Op Fl Fl server-nonce= Ns Ar nonce
|
||||
.Op Fl Fl server-identifier= Ns Ar nonce
|
||||
.Op Fl Fl client-nonce= Ns Ar nonce
|
||||
.Op Fl Fl opaque= Ns Ar string
|
||||
.Op Fl Fl realm= Ns Ar realm
|
||||
.Op Fl Fl method= Ns Ar method
|
||||
.Op Fl Fl uri= Ns Ar uri
|
||||
.Op Fl Fl nounce-count= Ns Ar count
|
||||
.Op Fl Fl qop= Ns Ar qop
|
||||
.Xc
|
||||
.Bl -tag -width Ds
|
||||
.It Xo
|
||||
.Fl -type= Ns Ar string
|
||||
.Fl Fl type= Ns Ar string
|
||||
.Xc
|
||||
digest type
|
||||
.It Xo
|
||||
.Fl -username= Ns Ar name
|
||||
.Fl Fl username= Ns Ar name
|
||||
.Xc
|
||||
digest type
|
||||
.It Xo
|
||||
.Fl -password= Ns Ar password
|
||||
.Fl Fl password= Ns Ar password
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -server-nonce= Ns Ar nonce
|
||||
.Fl Fl server-nonce= Ns Ar nonce
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -server-identifier= Ns Ar nonce
|
||||
.Fl Fl server-identifier= Ns Ar nonce
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -client-nonce= Ns Ar nonce
|
||||
.Fl Fl client-nonce= Ns Ar nonce
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -opaque= Ns Ar string
|
||||
.Fl Fl opaque= Ns Ar string
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -realm= Ns Ar realm
|
||||
.Fl Fl realm= Ns Ar realm
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -method= Ns Ar method
|
||||
.Fl Fl method= Ns Ar method
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -uri= Ns Ar uri
|
||||
.Fl Fl uri= Ns Ar uri
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -nounce-count= Ns Ar count
|
||||
.Fl Fl nounce-count= Ns Ar count
|
||||
.Xc
|
||||
.It Xo
|
||||
.Fl -qop= Ns Ar qop
|
||||
.Fl Fl qop= Ns Ar qop
|
||||
.Xc
|
||||
.El
|
||||
.It Xo ntlm-server-init
|
||||
.Op Fl -version= Ns Ar integer
|
||||
.Op Fl -kerberos-realm= Ns Ar string
|
||||
.Op Fl Fl version= Ns Ar integer
|
||||
.Op Fl Fl kerberos-realm= Ns Ar string
|
||||
.Xc
|
||||
.Bl -tag -width Ds
|
||||
.It Xo
|
||||
.Fl -version= Ns Ar integer
|
||||
.Fl Fl version= Ns Ar integer
|
||||
.Xc
|
||||
ntlm version
|
||||
.It Xo
|
||||
.Fl -kerberos-realm= Ns Ar string
|
||||
.Fl Fl kerberos-realm= Ns Ar string
|
||||
.Xc
|
||||
Kerberos realm to communicate with
|
||||
.El
|
||||
|
||||
@@ -39,18 +39,18 @@
|
||||
.Nd "get a ticket for a particular service"
|
||||
.Sh SYNOPSIS
|
||||
.Nm
|
||||
.Op Fl -canonicalize
|
||||
.Op Fl Fl canonicalize
|
||||
.Oo Fl c cache \*(Ba Xo
|
||||
.Fl -cache= Ns Ar cache
|
||||
.Fl Fl cache= Ns Ar cache
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl e Ar enctype \*(Ba Xo
|
||||
.Fl -enctype= Ns Ar enctype
|
||||
.Fl Fl enctype= Ns Ar enctype
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl -no-transit-check
|
||||
.Op Fl -version
|
||||
.Op Fl -help
|
||||
.Op Fl Fl no-transit-check
|
||||
.Op Fl Fl version
|
||||
.Op Fl Fl help
|
||||
.Ar service
|
||||
.Sh DESCRIPTION
|
||||
.Nm
|
||||
@@ -61,16 +61,16 @@ ticket or of a special type.
|
||||
.Pp
|
||||
Supported options:
|
||||
.Bl -tag -width Ds
|
||||
.It Fl -canonicalize
|
||||
.It Fl Fl canonicalize
|
||||
requests that the KDC canonicalize the principal.
|
||||
.It Fl c Ar cache , Fl -cache= Ns Ar cache
|
||||
.It Fl c Ar cache , Fl Fl cache= Ns Ar cache
|
||||
the credential cache to use.
|
||||
.It Fl e Ar enctype , Fl -enctype= Ns Ar enctype
|
||||
.It Fl e Ar enctype , Fl Fl enctype= Ns Ar enctype
|
||||
encryption type to use.
|
||||
.It Fl -no-transit-check
|
||||
.It Fl Fl no-transit-check
|
||||
requests that the KDC doesn't do transit checking.
|
||||
.It Fl -version
|
||||
.It Fl -help
|
||||
.It Fl Fl version
|
||||
.It Fl Fl help
|
||||
.El
|
||||
.Sh SEE ALSO
|
||||
.Xr kinit 1 ,
|
||||
|
||||
@@ -40,17 +40,17 @@
|
||||
impersonate a user when there exist a srvtab, keyfile or KeyFile
|
||||
.Sh SYNOPSIS
|
||||
.Nm
|
||||
.Op Fl s Ar string \*(Ba Fl -server= Ns Ar string
|
||||
.Op Fl c Ar string \*(Ba Fl -client= Ns Ar string
|
||||
.Op Fl k Ar string \*(Ba Fl -keytab= Ns Ar string
|
||||
.Op Fl 5 | Fl -krb5
|
||||
.Op Fl e Ar integer \*(Ba Fl -expire-time= Ns Ar integer
|
||||
.Op Fl a Ar string \*(Ba Fl -client-address= Ns Ar string
|
||||
.Op Fl t Ar string \*(Ba Fl -enc-type= Ns Ar string
|
||||
.Op Fl f Ar string \*(Ba Fl -ticket-flags= Ns Ar string
|
||||
.Op Fl -verbose
|
||||
.Op Fl -version
|
||||
.Op Fl -help
|
||||
.Op Fl s Ar string \*(Ba Fl Fl server= Ns Ar string
|
||||
.Op Fl c Ar string \*(Ba Fl Fl client= Ns Ar string
|
||||
.Op Fl k Ar string \*(Ba Fl Fl keytab= Ns Ar string
|
||||
.Op Fl 5 | Fl Fl krb5
|
||||
.Op Fl e Ar integer \*(Ba Fl Fl expire-time= Ns Ar integer
|
||||
.Op Fl a Ar string \*(Ba Fl Fl client-address= Ns Ar string
|
||||
.Op Fl t Ar string \*(Ba Fl Fl enc-type= Ns Ar string
|
||||
.Op Fl f Ar string \*(Ba Fl Fl ticket-flags= Ns Ar string
|
||||
.Op Fl Fl verbose
|
||||
.Op Fl Fl version
|
||||
.Op Fl Fl help
|
||||
.Sh DESCRIPTION
|
||||
The
|
||||
.Nm
|
||||
@@ -59,27 +59,27 @@ The service key can be read from a Kerberos 5 keytab, AFS KeyFile or
|
||||
(if compiled with support for Kerberos 4) a Kerberos 4 srvtab.
|
||||
Supported options:
|
||||
.Bl -tag -width Ds
|
||||
.It Fl s Ar string Ns , Fl -server= Ns Ar string
|
||||
.It Fl s Ar string Ns , Fl Fl server= Ns Ar string
|
||||
name of server principal
|
||||
.It Fl c Ar string Ns , Fl -client= Ns Ar string
|
||||
.It Fl c Ar string Ns , Fl Fl client= Ns Ar string
|
||||
name of client principal
|
||||
.It Fl k Ar string Ns , Fl -keytab= Ns Ar string
|
||||
.It Fl k Ar string Ns , Fl Fl keytab= Ns Ar string
|
||||
name of keytab file
|
||||
.It Fl 5 Ns , Fl -krb5
|
||||
.It Fl 5 Ns , Fl Fl krb5
|
||||
create a Kerberos 5 ticket
|
||||
.It Fl e Ar integer Ns , Fl -expire-time= Ns Ar integer
|
||||
.It Fl e Ar integer Ns , Fl Fl expire-time= Ns Ar integer
|
||||
lifetime of ticket in seconds
|
||||
.It Fl a Ar string Ns , Fl -client-address= Ns Ar string
|
||||
.It Fl a Ar string Ns , Fl Fl client-address= Ns Ar string
|
||||
address of client
|
||||
.It Fl t Ar string Ns , Fl -enc-type= Ns Ar string
|
||||
.It Fl t Ar string Ns , Fl Fl enc-type= Ns Ar string
|
||||
encryption type
|
||||
.It Fl f Ar string Ns , Fl -ticket-flags= Ns Ar string
|
||||
.It Fl f Ar string Ns , Fl Fl ticket-flags= Ns Ar string
|
||||
ticket flags for krb5 ticket
|
||||
.It Fl -verbose
|
||||
.It Fl Fl verbose
|
||||
Verbose output
|
||||
.It Fl -version
|
||||
.It Fl Fl version
|
||||
Print version
|
||||
.It Fl -help
|
||||
.It Fl Fl help
|
||||
.El
|
||||
.Sh FILES
|
||||
Uses
|
||||
|
||||
@@ -39,52 +39,52 @@
|
||||
.Nd acquire initial tickets
|
||||
.Sh SYNOPSIS
|
||||
.Nm kinit
|
||||
.Op Fl -afslog
|
||||
.Op Fl Fl afslog
|
||||
.Oo Fl c Ar cachename \*(Ba Xo
|
||||
.Fl -cache= Ns Ar cachename
|
||||
.Fl Fl cache= Ns Ar cachename
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl f | Fl -no-forwardable
|
||||
.Op Fl f | Fl Fl no-forwardable
|
||||
.Oo Fl t Ar keytabname \*(Ba Xo
|
||||
.Fl -keytab= Ns Ar keytabname
|
||||
.Fl Fl keytab= Ns Ar keytabname
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl l Ar time \*(Ba Xo
|
||||
.Fl -lifetime= Ns Ar time
|
||||
.Fl Fl lifetime= Ns Ar time
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl p | Fl -proxiable
|
||||
.Op Fl R | Fl -renew
|
||||
.Op Fl -renewable
|
||||
.Op Fl p | Fl Fl proxiable
|
||||
.Op Fl R | Fl Fl renew
|
||||
.Op Fl Fl renewable
|
||||
.Oo Fl r Ar time \*(Ba Xo
|
||||
.Fl -renewable-life= Ns Ar time
|
||||
.Fl Fl renewable-life= Ns Ar time
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl S Ar principal \*(Ba Xo
|
||||
.Fl -server= Ns Ar principal
|
||||
.Fl Fl server= Ns Ar principal
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl s Ar time \*(Ba Xo
|
||||
.Fl -start-time= Ns Ar time
|
||||
.Fl Fl start-time= Ns Ar time
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl k | Fl -use-keytab
|
||||
.Op Fl v | Fl -validate
|
||||
.Op Fl k | Fl Fl use-keytab
|
||||
.Op Fl v | Fl Fl validate
|
||||
.Oo Fl e Ar enctypes \*(Ba Xo
|
||||
.Fl -enctypes= Ns Ar enctypes
|
||||
.Fl Fl enctypes= Ns Ar enctypes
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl a Ar addresses \*(Ba Xo
|
||||
.Fl -extra-addresses= Ns Ar addresses
|
||||
.Fl Fl extra-addresses= Ns Ar addresses
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl -password-file= Ns Ar filename
|
||||
.Op Fl -fcache-version= Ns Ar version-number
|
||||
.Op Fl A | Fl -no-addresses
|
||||
.Op Fl -anonymous
|
||||
.Op Fl -enterprise
|
||||
.Op Fl -version
|
||||
.Op Fl -help
|
||||
.Op Fl Fl password-file= Ns Ar filename
|
||||
.Op Fl Fl fcache-version= Ns Ar version-number
|
||||
.Op Fl A | Fl Fl no-addresses
|
||||
.Op Fl Fl anonymous
|
||||
.Op Fl Fl enterprise
|
||||
.Op Fl Fl version
|
||||
.Op Fl Fl help
|
||||
.Op Ar principal Op Ar command
|
||||
.Sh DESCRIPTION
|
||||
.Nm
|
||||
@@ -96,51 +96,51 @@ can later be used to obtain tickets for other services.
|
||||
.Pp
|
||||
Supported options:
|
||||
.Bl -tag -width Ds
|
||||
.It Fl c Ar cachename Fl -cache= Ns Ar cachename
|
||||
.It Fl c Ar cachename Fl Fl cache= Ns Ar cachename
|
||||
The credentials cache to put the acquired ticket in, if other than
|
||||
default.
|
||||
.It Fl f Fl -no-forwardable
|
||||
.It Fl f Fl Fl no-forwardable
|
||||
Get ticket that can be forwarded to another host, or if the negative
|
||||
flags use, don't get a forwardable flag.
|
||||
.It Fl t Ar keytabname , Fl -keytab= Ns Ar keytabname
|
||||
.It Fl t Ar keytabname , Fl Fl keytab= Ns Ar keytabname
|
||||
Don't ask for a password, but instead get the key from the specified
|
||||
keytab.
|
||||
.It Fl l Ar time , Fl -lifetime= Ns Ar time
|
||||
.It Fl l Ar time , Fl Fl lifetime= Ns Ar time
|
||||
Specifies the lifetime of the ticket.
|
||||
The argument can either be in seconds, or a more human readable string
|
||||
like
|
||||
.Sq 1h .
|
||||
.It Fl p , Fl -proxiable
|
||||
.It Fl p , Fl Fl proxiable
|
||||
Request tickets with the proxiable flag set.
|
||||
.It Fl R , Fl -renew
|
||||
.It Fl R , Fl Fl renew
|
||||
Try to renew ticket.
|
||||
The ticket must have the
|
||||
.Sq renewable
|
||||
flag set, and must not be expired.
|
||||
.It Fl -renewable
|
||||
.It Fl Fl renewable
|
||||
The same as
|
||||
.Fl -renewable-life ,
|
||||
.Fl Fl renewable-life ,
|
||||
with an infinite time.
|
||||
.It Fl r Ar time , Fl -renewable-life= Ns Ar time
|
||||
.It Fl r Ar time , Fl Fl renewable-life= Ns Ar time
|
||||
The max renewable ticket life.
|
||||
.It Fl S Ar principal , Fl -server= Ns Ar principal
|
||||
.It Fl S Ar principal , Fl Fl server= Ns Ar principal
|
||||
Get a ticket for a service other than krbtgt/LOCAL.REALM.
|
||||
.It Fl s Ar time , Fl -start-time= Ns Ar time
|
||||
.It Fl s Ar time , Fl Fl start-time= Ns Ar time
|
||||
Obtain a ticket that starts to be valid
|
||||
.Ar time
|
||||
(which can really be a generic time specification, like
|
||||
.Sq 1h )
|
||||
seconds into the future.
|
||||
.It Fl k , Fl -use-keytab
|
||||
.It Fl k , Fl Fl use-keytab
|
||||
The same as
|
||||
.Fl -keytab ,
|
||||
.Fl Fl keytab ,
|
||||
but with the default keytab name (normally
|
||||
.Ar FILE:/etc/krb5.keytab ) .
|
||||
.It Fl v , Fl -validate
|
||||
.It Fl v , Fl Fl validate
|
||||
Try to validate an invalid ticket.
|
||||
.It Fl e , Fl -enctypes= Ns Ar enctypes
|
||||
.It Fl e , Fl Fl enctypes= Ns Ar enctypes
|
||||
Request tickets with this particular enctype.
|
||||
.It Fl -password-file= Ns Ar filename
|
||||
.It Fl Fl password-file= Ns Ar filename
|
||||
read the password from the first line of
|
||||
.Ar filename .
|
||||
If the
|
||||
@@ -148,10 +148,10 @@ If the
|
||||
is
|
||||
.Ar STDIN ,
|
||||
the password will be read from the standard input.
|
||||
.It Fl -fcache-version= Ns Ar version-number
|
||||
.It Fl Fl fcache-version= Ns Ar version-number
|
||||
Create a credentials cache of version
|
||||
.Ar version-number .
|
||||
.It Fl a , Fl -extra-addresses= Ns Ar enctypes
|
||||
.It Fl a , Fl Fl extra-addresses= Ns Ar enctypes
|
||||
Adds a set of addresses that will, in addition to the systems local
|
||||
addresses, be put in the ticket.
|
||||
This can be useful if all addresses a client can use can't be
|
||||
@@ -161,13 +161,13 @@ Also settable via
|
||||
.Li libdefaults/extra_addresses
|
||||
in
|
||||
.Xr krb5.conf 5 .
|
||||
.It Fl A , Fl -no-addresses
|
||||
.It Fl A , Fl Fl no-addresses
|
||||
Request a ticket with no addresses.
|
||||
.It Fl -anonymous
|
||||
.It Fl Fl anonymous
|
||||
Request an anonymous ticket (which means that the ticket will be
|
||||
issued to an anonymous principal, typically
|
||||
.Dq anonymous@REALM ) .
|
||||
.It Fl -enterprise
|
||||
.It Fl Fl enterprise
|
||||
Parse principal as a enterprise (KRB5-NT-ENTERPRISE) name. Enterprise
|
||||
names are email like principals that are stored in the name part of
|
||||
the principal, and since there are two @ characters the parser needs
|
||||
@@ -177,7 +177,7 @@ An example of an enterprise name is
|
||||
and this option is usually used with canonicalize so that the
|
||||
principal returned from the KDC will typically be the real principal
|
||||
name.
|
||||
.It Fl -afslog
|
||||
.It Fl Fl afslog
|
||||
Gets AFS tickets, converts them to version 4 format, and stores them
|
||||
in the kernel.
|
||||
Only useful if you have AFS.
|
||||
|
||||
@@ -41,17 +41,17 @@
|
||||
.Nm
|
||||
.Bk -words
|
||||
.Oo Fl c Ar cache \*(Ba Xo
|
||||
.Fl -cache= Ns Ar cache
|
||||
.Fl Fl cache= Ns Ar cache
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl s | Fl t | Fl -test
|
||||
.Op Fl T | Fl -tokens
|
||||
.Op Fl 5 | Fl -v5
|
||||
.Op Fl v | Fl -verbose
|
||||
.Op Fl l | Fl -list-caches
|
||||
.Op Fl s | Fl t | Fl Fl test
|
||||
.Op Fl T | Fl Fl tokens
|
||||
.Op Fl 5 | Fl Fl v5
|
||||
.Op Fl v | Fl Fl verbose
|
||||
.Op Fl l | Fl Fl list-caches
|
||||
.Op Fl f
|
||||
.Op Fl -version
|
||||
.Op Fl -help
|
||||
.Op Fl Fl version
|
||||
.Op Fl Fl help
|
||||
.Ek
|
||||
.Sh DESCRIPTION
|
||||
.Nm
|
||||
@@ -60,14 +60,14 @@ known as the ticket file).
|
||||
.Pp
|
||||
Options supported:
|
||||
.Bl -tag -width Ds
|
||||
.It Fl c Ar cache , Fl -cache= Ns Ar cache
|
||||
.It Fl c Ar cache , Fl Fl cache= Ns Ar cache
|
||||
credential cache to list
|
||||
.It Fl s , Fl t , Fl -test
|
||||
.It Fl s , Fl t , Fl Fl test
|
||||
Test for there being an active and valid TGT for the local realm of
|
||||
the user in the credential cache.
|
||||
.It Fl T , Fl -tokens
|
||||
.It Fl T , Fl Fl tokens
|
||||
display AFS tokens
|
||||
.It Fl 5 , Fl -v5
|
||||
.It Fl 5 , Fl Fl v5
|
||||
display v5 cred cache (this is the default)
|
||||
.It Fl f
|
||||
Include ticket flags in short form, each character stands for a
|
||||
@@ -98,9 +98,9 @@ hardware authenticated
|
||||
.El
|
||||
.Pp
|
||||
This information is also output with the
|
||||
.Fl -verbose
|
||||
.Fl Fl verbose
|
||||
option, but in a more verbose way.
|
||||
.It Fl v , Fl -verbose
|
||||
.It Fl v , Fl Fl verbose
|
||||
Verbose output. Include all possible information:
|
||||
.Bl -tag -width XXXX -offset indent
|
||||
.It Server
|
||||
@@ -125,7 +125,7 @@ the flags set on the ticket
|
||||
.It Addresses
|
||||
the set of addresses from which this ticket is valid
|
||||
.El
|
||||
.It Fl l , Fl -list-caches
|
||||
.It Fl l , Fl Fl list-caches
|
||||
List the credential caches for the current users, not all cache types
|
||||
supports listing multiple caches.
|
||||
.Pp
|
||||
|
||||
@@ -39,48 +39,48 @@ switch between default credential caches
|
||||
.Sh SYNOPSIS
|
||||
.Nm
|
||||
.Oo Fl t Ar type \*(Ba Xo
|
||||
.Fl -type= Ns Ar type
|
||||
.Fl Fl type= Ns Ar type
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl c Ar cache \*(Ba Xo
|
||||
.Fl -cache= Ns Ar cache
|
||||
.Fl Fl cache= Ns Ar cache
|
||||
.Xc
|
||||
.Oc
|
||||
.Oo Fl p Ar principal \*(Ba Xo
|
||||
.Fl -principal= Ns Ar principal
|
||||
.Fl Fl principal= Ns Ar principal
|
||||
.Xc
|
||||
.Oc
|
||||
.Op Fl i | Fl -interactive
|
||||
.Op Fl -version
|
||||
.Op Fl -help
|
||||
.Op Fl i | Fl Fl interactive
|
||||
.Op Fl Fl version
|
||||
.Op Fl Fl help
|
||||
.Sh DESCRIPTION
|
||||
Supported options:
|
||||
.Bl -tag -width Ds
|
||||
.It Xo
|
||||
.Fl t Ar type ,
|
||||
.Fl -type= Ns Ar type
|
||||
.Fl Fl type= Ns Ar type
|
||||
.Xc
|
||||
type of credential cache
|
||||
.It Xo
|
||||
.Fl c Ar cache ,
|
||||
.Fl -cache= Ns Ar cache
|
||||
.Fl Fl cache= Ns Ar cache
|
||||
.Xc
|
||||
name of credential cache to switch to
|
||||
.It Xo
|
||||
.Fl p Ar principal ,
|
||||
.Fl -principal= Ns Ar principal
|
||||
.Fl Fl principal= Ns Ar principal
|
||||
.Xc
|
||||
name of principal to switch to
|
||||
.It Xo
|
||||
.Fl i ,
|
||||
.Fl -interactive
|
||||
.Fl Fl interactive
|
||||
.Xc
|
||||
interactive switching between credentials.
|
||||
.It Xo
|
||||
.Fl -version
|
||||
.Fl Fl version
|
||||
.Xc
|
||||
print version
|
||||
.It Xo
|
||||
.Fl -help
|
||||
.Fl Fl help
|
||||
.Xc
|
||||
.El
|
||||
|
||||
Reference in New Issue
Block a user