klist --
list the authentication tickets stored in a credentials cache
Syntax
klist [-ccache ] [ -e ] [ -f ]
Description
klist lists the primary
principal and the authentication tickets
held in the credentials cache.
For each ticket,
the command lists its starting time and expiration time,
and the service principal for which the ticket is valid.
-ccache
define an alternative credentials cache pathname.
The format of cache is FILE:filename.
The default cache is /tmp/krb5cc_UID
where UID is the decimal user ID.
-e
list expired tickets.
-f
display the flags field for each ticket in the cache.
The flags are:
D
May PostDate
d
PostDated
F
Forwardable
f
Forwarded
I
Initial
i
Invalid
P
Proxiable
p
Proxy
R
Renewable
Environment variables
KRB5CCNAME
alternate default cache
Limitations
klist does not display
ticket options or lifetimes.