KGETCRED(1) | General Commands Manual | KGETCRED(1) |
kgetcred | [--canonicalize] [--canonical] [-c -cache | --cache=cache] [-e enctype | --enctype=enctype] [--debug] [-H | --hostbased] [--name-type=name-type] [--no-transit-check] [--no-store] [--cached-only] [--version] [--help] principal |
kgetcred | [options] --hostbased principal |
kgetcred | [options] --hostbased service hostname [extra-components] |
If --hostbased is given then the given service principal name will be canonicalized (see below).
The third form constructs a host-based principal from the given service name and hostname. The service name "host" is used if the given service name in the third usage is the empty string.
For host-based names, the local host's hostname is used if the given hostname is the empty string or if the principal has a single component.
Any additional components will be included, even for host-based service principal names, but there are no defaults nor local canonicalization rules for additional components.
Local name canonicalization rules are applied unless the --canonical option is given. Currently local name canonicalization rules are supported only for host-based principal names' hostname component.
The principal's realm name may be canonicalized by following Kerberos referrals from the client principal's home realm if the --canonicalize option is given or if the local name canonicalization rules are configured to use referrals.
Supported options:
If the --canonical option is used, then no further canonicalization should be done locally by the client (for example, DNS), but if --canonicalize is used, then the client will ask that the KDC canonicalize the name.
If the --canonicalize option is used with --hostbased a host-based name-type, and --canonical is not used, then the hostname will be canonicalized according to the name canonicalization rules in krb5.conf.
GSS-API initiator applications with host-based services will get the same behavior as using the --canonicalize --hostbased options here.
March 12, 2004 | NetBSD 7.2 |