## SYNOPSIS

           klist  [-5]  [-4]  [-e]  [[-c]  [-f]  [-s]  [-a   [-n]]] [-k [-t] [-K]]
           [cache_name | keytab_name]

## DESCRIPTION

           Klist lists the Kerberos principal and Kerberos tickets held in a  cre-
           dentials  cache, or the keys held in a keytab file.  If klist was built
           with Kerberos 4 support, the default behavior is to list both  Kerberos
           5 and Kerberos 4 credentials.  Otherwise, klist will default to listing
           only Kerberos 5 credentials.

## OPTIONS

           -5     list  Kerberos  5  credentials.   This  overrides  whatever  the
                  default  built-in behavior may be.  This option may be used with
                  -4

           -4     list  Kerberos  4  credentials.   This  overrides  whatever  the
                  default built-in behavior may be.  This option is only available
                  if kinit was built with Kerberos 4 compatibility.   This  option
                  may be used with -5

           -e     displays  the encryption types of the session key and the ticket
                  for each credential in the credential cache, or each key in  the
                  keytab file.

           -c     List  tickets  held in a credentials cache.  This is the default
                  if neither -c nor -k is specified.

           -f     shows the flags present in the credentials, using the  following
                  abbreviations:

                       F    Forwardable
                       f    forwarded
                       P    Proxiable
                       p    proxy
                       D    postDateable
                       d    postdated
                       R    Renewable
                       I    Initial
                       i    invalid
                       H    Hardware authenticated
                       A    preAuthenticated
                       T    Transit policy checked
                       O    Okay as delegate
                       a    anonymous

           -s     causes  klist  to run silently (produce no output), but to still
                  set the exit status according to whether it  finds  the  creden-
                  tials  cache.   The  exit status is `0' if klist finds a creden-
                  tials cache, and `1' if it does not or if the tickets are
                   expired.

           priate.  If the KRB5CCNAME environment variable is set,  its  value  is
           used to name the default ticket cache.

## ENVIRONMENT

           Klist uses the following environment variables:

           KRB5CCNAME      Location  of the Kerberos 5 credentials (ticket) cache.

           KRBTKFILE      Filename of the Kerberos 4 credentials (ticket) cache.

## FILES

           /tmp/krb5cc_[uid]  default location of  Kerberos  5  credentials  cache
                              ([uid] is the decimal UID of the user).

           /tmp/tkt[uid]  default  location of Kerberos 4 credentials cache ([uid]
                          is the decimal UID of the user).

           /etc/krb5.keytab
                          default location for the local host's keytab file.

## SEE ALSO

           kinit(1), kdestroy(1), krb5(3)

                                                                          KLIST(1)