kerberos

network authentication protocol

TLDR

Get ticket

$ kinit [principal]

List tickets

$ klist

Destroy tickets

$ kdestroy

Change password

$ kpasswd

Forward ticket

$ kinit -f [principal]

Renew ticket

$ kinit -R

SYNOPSIS

Kerberos commands: kinit, klist, kdestroy, kpasswd

Kerberos is a network authentication protocol. It uses tickets to authenticate users and services.
The protocol provides single sign-on across networked services. Common commands include kinit, klist, and kdestroy.

PARAMETERS

kinit PRINCIPAL

Get Kerberos ticket.

klist

List cached tickets.

kdestroy

Destroy tickets.

kpasswd

Change Kerberos password.

-f

Get forwardable ticket.

-R

Renew existing ticket.

-l LIFETIME

Ticket lifetime.

CAVEATS

Requires KDC infrastructure. Time synchronization critical. Network configuration needed.

HISTORY

Kerberos was developed at MIT as part of Project Athena. Version 5 is the current standard.