KINIT(1) KINIT(1) NAME kinit - Kerberos login utility SYNOPSIS kkiinniitt [ --iirrvvllpp ] DESCRIPTION The _k_i_n_i_t command is used to login to the Kerberos authentication and authorization system. Note that only registered Kerberos users can use the Kerberos system. For information about registering as a Kerberos user, see the _k_e_r_b_e_r_o_s_(_1_) manual page. If you are using a replaced _l_o_g_i_n that already fetches tickets for you, you do not have to use _k_i_n_i_t_. You will need to use _k_i_n_i_t only in those situa- tions in which your original tickets have expired. (Tickets expire in about a day.) Note as well that the modified _l_o_g_i_n will automatically destroy your tickets when you logout from the workstation. When you use _k_i_n_i_t without options, the utility prompts for your username and Kerberos password, and tries to authenticate your login with the local Kerberos server. If Kerberos authenticates the login attempt, _k_i_n_i_t retrieves your initial ticket and puts it in the ticket file specified by your KRBTKFILE environ- ment variable. If this variable is undefined, your ticket will be stored in the _/_t_m_p directory, in the file _t_k_t_u_i_d _, where _u_i_d specifies your user identification number. If you have logged in to Kerberos without the benefit of the modified _l_o_g_i_n program, make sure you use the _k_d_e_s_t_r_o_y command to destroy any active tick- ets before you end your login session. You may want to put the _k_d_e_s_t_r_o_y command in your _._l_o_g_o_u_t file so that your tickets will be destroyed auto- matically when you logout. The options to _k_i_n_i_t are as follows: --ii _k_i_n_i_t prompts you for a Kerberos instance. --rr _k_i_n_i_t prompts you for a Kerberos realm. This option lets you authenticate yourself with a remote Kerberos server. --vv Verbose mode. _k_i_n_i_t prints the name of the ticket file used, and a status message indicating the success or failure of your login attempt. --ll _k_i_n_i_t prompts you for a ticket lifetime in minutes. Due to protocol restrictions in Kerberos Version 4, this value must be between 5 and 1275 minutes. --pp _k_i_n_i_t will acquire a ticket for changepw.kerberos. SEE ALSO kerberos(1), kdestroy(1), klist(1), login(1) BUGS The --rr option has not been fully implemented. AUTHORS Steve Miller, MIT Project Athena/Digital Equipment Corporation Clifford Neuman, MIT Project Athena