klist(8krb)klist(8krb)Nameklist - lists currently held Kerberos tickets
/usr/bin/klist [ \-s | -t ] [ -file [filename] ] [ -srvtab ]
filename The name of the Kerberos ticket file.
The command allows you to print the name of the ticket file, the iden‐
tity of the principal requesting the tickets (as listed in the ticket
file), and the principal names of all the Kerberos tickets currently
held by the user (along with the issue and expiration times for each
authenticator). Principal names are listed in the form:
The period (.) is omitted if the instance is null, and the at sign (@)
is omitted if the realm is null.
The command also enables you to print the entries in the file. If the
-srvtab option is selected, will print the service name, instance name,
realm name, and key version of all services listed in the file.
Options-s Suppresses the printing of the issue and expiration times, the
name of the ticket file, or the identity of the principal.
-t Checks for the existence of an unexpired ticket-granting-ticket
in the ticket file. If one is present, exits with status of
zero (0). Otherwise, it exits with status 1. No output is gen‐
erated when this option is specified.
-file Causes the following argument to be used as the ticket file.
Otherwise, the file is used, where is the user ID of the
Indicates that data should be printed. If the -file switch is
not used, the data is read from the default file,
User-level authentication is not supported. However, by naming the
file with the option, you can look at the tickets generated by
To get the name of the local realm
The default ticket file
The file containing tickets generated by
See Alsokinit(8krb), kdestroy(8krb)klist(8krb)