.. _klist(1):

klist

=====

SYNOPSIS

--------

**klist**

[**-e**]

[[**-c**] [**-l**] [**-A**] [**-f**] [**-s**] [**-a** [**-n**]]]

[**-C**]

[**-k** [**-t**] [**-K**]]

[**-V**]

[*cache_name*\|\ *keytab_name*]

DESCRIPTION

-----------

klist lists the Kerberos principal and Kerberos tickets held in a

credentials cache, or the keys held in a keytab file.

OPTIONS

-------

**-e**

    Displays the encryption types of the session key and the ticket

    for each credential in the credential cache, or each key in the

    keytab file.

**-l**

    If a cache collection is available, displays a table summarizing

    the caches present in the collection.

**-A**

    If a cache collection is available, displays the contents of all

    of the caches in the collection.

**-c**

    List tickets held in a credentials cache. This is the default if

    neither **-c** nor **-k** is specified.

**-f**

    Shows the flags present in the credentials, using the following

    abbreviations::

        F    Forwardable

        f    forwarded

        P    Proxiable

        p    proxy

        D    postDateable

        d    postdated

        R    Renewable

        I    Initial

        i    invalid

        H    Hardware authenticated

        A    preAuthenticated

        T    Transit policy checked

        O    Okay as delegate

        a    anonymous

**-s**

    Causes klist to run silently (produce no output).  klist will exit

    with status 1 if the credentials cache cannot be read or is

    expired, and with status 0 otherwise.

**-a**

    Display list of addresses in credentials.

**-n**

    Show numeric addresses instead of reverse-resolving addresses.

**-C**

    List configuration data that has been stored in the credentials

    cache when klist encounters it.  By default, configuration data

    is not listed.

**-k**

    List keys held in a keytab file.

**-i**

    In combination with **-k**, defaults to using the default client

    keytab instead of the default acceptor keytab, if no name is

    given.

**-t**

    Display the time entry timestamps for each keytab entry in the

    keytab file.

**-K**

    Display the value of the encryption key in each keytab entry in

    the keytab file.

**-V**

    Display the Kerberos version number and exit.

If *cache_name* or *keytab_name* is not specified, klist will display

the credentials in the default credentials cache or keytab file as

appropriate.  If the **KRB5CCNAME** environment variable is set, its

value is used to locate the default ticket cache.

ENVIRONMENT

-----------

See :ref:`kerberos(7)` for a description of Kerberos environment

variables.

FILES

-----

|ccache|

    Default location of Kerberos 5 credentials cache

|keytab|

    Default location for the local host's keytab file.

SEE ALSO

--------

:ref:`kinit(1)`, :ref:`kdestroy(1)`, :ref:`kerberos(7)`