


KINIT(1)                                                 KINIT(1)


NNAAMMEE
       kinit - Kerberos login utility

SSYYNNOOPPSSIISS
       kkiinniitt [ --iirrvvll ]

DDEESSCCRRIIPPTTIIOONN
       The _k_i_n_i_t command is used to login to the Kerberos authen-
       tication and authorization system.  Note that only  regis-
       tered  Kerberos  users  can  use the Kerberos system.  For
       information about registering as a Kerberos user, see  the
       _k_e_r_b_e_r_o_s_(_1_) manual page.

       If  you are logged in to a workstation that is running the
       _t_o_e_h_o_l_d service, you do not have to use _k_i_n_i_t_.   The  _t_o_e_-
       _h_o_l_d  login procedure will log you into Kerberos automati-
       cally.  You will need to use _k_i_n_i_t only  in  those  situa-
       tions in which your original tickets have expired.  (Tick-
       ets expire in about a day.)  Note  as  well  that  _t_o_e_h_o_l_d
       will  automatically  destroy  your tickets when you logout
       from the workstation.

       When you use _k_i_n_i_t without options,  the  utility  prompts
       for  your  username  and  Kerberos  password, and tries to
       authenticate your login with the local Kerberos server.

       If  Kerberos  authenticates  the  login   attempt,   _k_i_n_i_t
       retrieves  your  initial  ticket and puts it in the ticket
       file specified by your KRBTKFILE environment variable.  If
       this  variable is undefined, your ticket will be stored in
       the _/_t_m_p directory, in the file _t_k_t_u_i_d _, where _u_i_d  speci-
       fies your user identification number.

       If  you  have logged in to Kerberos without the benefit of
       the workstation _t_o_e_h_o_l_d system, make sure you use the _k_d_e_-
       _s_t_r_o_y command to destroy any active tickets before you end
       your login session.  You may want to put the _k_d_e_s_t_r_o_y com-
       mand  in  your  _._l_o_g_o_u_t  file so that your tickets will be
       destroyed automatically when you logout.

       The options to _k_i_n_i_t are as follows:

       --ii     _k_i_n_i_t prompts you for a Kerberos instance.

       --rr     _k_i_n_i_t prompts  you  for  a  Kerberos  realm.   This
              option lets you authenticate yourself with a remote
              Kerberos server.

       --vv     Verbose mode.  _k_i_n_i_t prints the name of the  ticket
              file used, and a status message indicating the suc-
              cess or failure of your login attempt.

       --ll     _k_i_n_i_t prompts you for a ticket lifetime in minutes.
              Due to protocol restrictions in Kerberos Version 4,



MIT Project Athena     Kerberos Version 4.0                     1





KINIT(1)                                                 KINIT(1)


              this value must be between 5 and 1275 minutes.

SSEEEE AALLSSOO
       kerberos(1), kdestroy(1), klist(1), toehold(1)

BBUUGGSS
       The --rr option has not been fully implemented.

AAUUTTHHOORRSS
       Steve Miller, MIT Project Athena/Digital Equipment  Corpo-
       ration
       Clifford Neuman, MIT Project Athena













































MIT Project Athena     Kerberos Version 4.0                     2


