krb5: Import MIT 1.21.3 - src - FreeBSD source tree

diff options


context:
space:
mode:

author	Cy Schubert <cy@FreeBSD.org>	2025-03-19 22:12:25 +0000
committer	Cy Schubert <cy@FreeBSD.org>	2025-03-19 22:12:25 +0000
commit	8f7d3ef26dec89a92ec0665de84a5936310a5574 (patch)
tree	9a465418bd4056bf0d369751320a414eaed29fa4 /doc/html/user/user_commands/kvno.html
parent	1a79b20663ca26acc2998b90ea2ff2aefd8af5b1 (diff)

Diffstat (limited to 'doc/html/user/user_commands/kvno.html')

-rw-r--r--

doc/html/user/user_commands/kvno.html

160

1 files changed, 77 insertions, 83 deletions

diff --git a/doc/html/user/user_commands/kvno.html b/doc/html/user/user_commands/kvno.html
index bb6a3f61dd76..18c4079f14dc 100644
--- a/doc/html/user/user_commands/kvno.html
+++ b/doc/html/user/user_commands/kvno.html

@@ -1,35 +1,26 @@

-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"

- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

+<!DOCTYPE html>

-<html xmlns="http://www.w3.org/1999/xhtml">

+<html>

<head>

- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

+ <meta charset="utf-8" />

+ <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="generator" content="Docutils 0.17.1: http://docutils.sourceforge.net/" />

<title>kvno — MIT Kerberos Documentation</title>

- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />

- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />

- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />

- <script type="text/javascript">

- var DOCUMENTATION_OPTIONS = {

- URL_ROOT: '../../',

- VERSION: '1.21.2',

- COLLAPSE_INDEX: false,

- FILE_SUFFIX: '.html',

- HAS_SOURCE: true,

- SOURCELINK_SUFFIX: '.txt'

- };

- </script>

- <script type="text/javascript" src="../../_static/jquery.js"></script>

- <script type="text/javascript" src="../../_static/underscore.js"></script>

- <script type="text/javascript" src="../../_static/doctools.js"></script>

+ <link rel="stylesheet" type="text/css" href="../../_static/pygments.css" />

+ <link rel="stylesheet" type="text/css" href="../../_static/agogo.css" />

+ <link rel="stylesheet" type="text/css" href="../../_static/kerb.css" />

+ <script data-url_root="../../" id="documentation_options" src="../../_static/documentation_options.js"></script>

+ <script src="../../_static/jquery.js"></script>

+ <script src="../../_static/underscore.js"></script>

+ <script src="../../_static/doctools.js"></script>

- </head>

- <body>

+ </head><body>

@@ -61,9 +52,9 @@

- <div class="section" id="kvno">

+ <section id="kvno">

-<div class="section" id="synopsis">

+<section id="synopsis">

<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>

[<strong>-c</strong> <em>ccache</em>]

@@ -77,96 +68,98 @@

[<strong>–out-cache</strong> <em>cache</em>]

[[{<strong>-F</strong> <em>cert_file</em> | {<strong>-I</strong> | <strong>-U</strong>} <em>for_user</em>} [<strong>-P</strong>]] | <strong>–u2u</strong> <em>ccache</em>]

<em>service1 service2</em> …</p>

-</div>

-<div class="section" id="description">

+</section>

+<section id="description">

<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>

<p>kvno acquires a service ticket for the specified Kerberos principals

and prints out the key version numbers of each.</p>

-</div>

-<div class="section" id="options">

+</section>

+<section id="options">

<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>

-<dl class="docutils">

-<dt><strong>-c</strong> <em>ccache</em></dt>

-<dd>Specifies the name of a credentials cache to use (if not the

-default)</dd>

-<dt><strong>-e</strong> <em>etype</em></dt>

-<dd>Specifies the enctype which will be requested for the session key

+<dl class="simple">

+<dt><strong>-c</strong> <em>ccache</em></dt><dd><p>Specifies the name of a credentials cache to use (if not the

+default)</p>

+</dd>

+<dt><strong>-e</strong> <em>etype</em></dt><dd><p>Specifies the enctype which will be requested for the session key

of all the services named on the command line. This is useful in

-certain backward compatibility situations.</dd>

-<dt><strong>-k</strong> <em>keytab</em></dt>

-<dd>Decrypt the acquired tickets using <em>keytab</em> to confirm their

-validity.</dd>

-<dt><strong>-q</strong></dt>

-<dd>Suppress printing output when successful. If a service ticket

+certain backward compatibility situations.</p>

+</dd>

+<dt><strong>-k</strong> <em>keytab</em></dt><dd><p>Decrypt the acquired tickets using <em>keytab</em> to confirm their

+validity.</p>

+</dd>

+<dt><strong>-q</strong></dt><dd><p>Suppress printing output when successful. If a service ticket

cannot be obtained, an error message will still be printed and

-kvno will exit with nonzero status.</dd>

-<dt><strong>-u</strong></dt>

-<dd>Use the unknown name type in requested service principal names.

-This option Cannot be used with <em>-S</em>.</dd>

-<dt><strong>-P</strong></dt>

-<dd>Specifies that the <em>service1 service2</em> … arguments are to be

+kvno will exit with nonzero status.</p>

+</dd>

+<dt><strong>-u</strong></dt><dd><p>Use the unknown name type in requested service principal names.

+This option Cannot be used with <em>-S</em>.</p>

+</dd>

+<dt><strong>-P</strong></dt><dd><p>Specifies that the <em>service1 service2</em> … arguments are to be

treated as services for which credentials should be acquired using

constrained delegation. This option is only valid when used in

-conjunction with protocol transition.</dd>

-<dt><strong>-S</strong> <em>sname</em></dt>

-<dd>Specifies that the <em>service1 service2</em> … arguments are

+conjunction with protocol transition.</p>

+</dd>

+<dt><strong>-S</strong> <em>sname</em></dt><dd><p>Specifies that the <em>service1 service2</em> … arguments are

interpreted as hostnames, and the service principals are to be

constructed from those hostnames and the service name <em>sname</em>.

The service hostnames will be canonicalized according to the usual

-rules for constructing service principals.</dd>

-<dt><strong>-I</strong> <em>for_user</em></dt>

-<dd>Specifies that protocol transition (S4U2Self) is to be used to

+rules for constructing service principals.</p>

+</dd>

+<dt><strong>-I</strong> <em>for_user</em></dt><dd><p>Specifies that protocol transition (S4U2Self) is to be used to

acquire a ticket on behalf of <em>for_user</em>. If constrained

delegation is not requested, the service name must match the

-credentials cache client principal.</dd>

-<dt><strong>-U</strong> <em>for_user</em></dt>

-<dd>Same as -I, but treats <em>for_user</em> as an enterprise name.</dd>

-<dt><strong>-F</strong> <em>cert_file</em></dt>

-<dd>Specifies that protocol transition is to be used, identifying the

+credentials cache client principal.</p>

+</dd>

+<dt><strong>-U</strong> <em>for_user</em></dt><dd><p>Same as -I, but treats <em>for_user</em> as an enterprise name.</p>

+</dd>

+<dt><strong>-F</strong> <em>cert_file</em></dt><dd><p>Specifies that protocol transition is to be used, identifying the

client principal with the X.509 certificate in <em>cert_file</em>. The

-certificate file must be in PEM format.</dd>

-<dt><strong>–cached-only</strong></dt>

-<dd>Only retrieve credentials already present in the cache, not from

-the KDC. (Added in release 1.19.)</dd>

-<dt><strong>–no-store</strong></dt>

-<dd>Do not store retrieved credentials in the cache. If

+certificate file must be in PEM format.</p>

+</dd>

+<dt><strong>–cached-only</strong></dt><dd><p>Only retrieve credentials already present in the cache, not from

+the KDC. (Added in release 1.19.)</p>

+</dd>

+<dt><strong>–no-store</strong></dt><dd><p>Do not store retrieved credentials in the cache. If

<strong>–out-cache</strong> is also specified, credentials will still be

-stored into the output credential cache. (Added in release 1.19.)</dd>

-<dt><strong>–out-cache</strong> <em>ccache</em></dt>

-<dd>Initialize <em>ccache</em> and store all retrieved credentials into it.

+stored into the output credential cache. (Added in release 1.19.)</p>

+</dd>

+<dt><strong>–out-cache</strong> <em>ccache</em></dt><dd><p>Initialize <em>ccache</em> and store all retrieved credentials into it.

Do not store acquired credentials in the input cache. (Added in

-release 1.19.)</dd>

-<dt><strong>–u2u</strong> <em>ccache</em></dt>

-<dd>Requests a user-to-user ticket. <em>ccache</em> must contain a local

+release 1.19.)</p>

+</dd>

+<dt><strong>–u2u</strong> <em>ccache</em></dt><dd><p>Requests a user-to-user ticket. <em>ccache</em> must contain a local

krbtgt ticket for the server principal. The reported version

number will typically be 0, as the resulting ticket is not

-encrypted in the server’s long-term key.</dd>

+encrypted in the server’s long-term key.</p>

+</dd>

</dl>

-</div>

-<div class="section" id="environment">

+</section>

+<section id="environment">

<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>

<p>See <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment

variables.</p>

-</div>

-<div class="section" id="files">

+</section>

+<section id="files">

<h2>FILES<a class="headerlink" href="#files" title="Permalink to this headline">¶</a></h2>

-<dl class="docutils">

-<dt><a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFCCNAME</span></a></dt>

-<dd>Default location of the credentials cache</dd>

+<dl class="simple">

+<dt><a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFCCNAME</span></a></dt><dd><p>Default location of the credentials cache</p>

+</dd>

</dl>

-</div>

-<div class="section" id="see-also">

+</section>

+<section id="see-also">

<p><a class="reference internal" href="kinit.html#kinit-1"><span class="std std-ref">kinit</span></a>, <a class="reference internal" href="kdestroy.html#kdestroy-1"><span class="std std-ref">kdestroy</span></a>, <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>

-</div>

+</section>

+ <div class="clearer"></div>

</div>

<ul>

@@ -222,6 +215,7 @@ variables.</p>

</form>

</div>

</div>

@@ -229,8 +223,8 @@ variables.</p>

- <div class="right" ><i>Release: 1.21.2</i><br />

+ <div class="right" ><i>Release: 1.21.3</i><br />

</div>