KINIT(1) MIT Kerberos KINIT(1) (NAME) kinit - (SYNOPSIS) kinit [-V] [-l lifetime] [-s start_time] [-r renewable_life] [-p | -P] [-f | -F] [-a] [-A] [-C] [-E] [-v] [-R] [-k [-i | -t keytab_file]] [-c cache_name] [-n] [-S service_name] [-I input_ccache] [-T armor_ccache] [-X attribute[=value]] [--request-pac | --no-request-pac] [principal] (DESCRIPTION) kinit (TGT) principal . principal kinit (ccache) kinit . . (OPTIONS) -V (verbose). -l lifetime ( .) lifetime . kinit -l 5:30 kinit -l 5h30m. -l ( ) . ( ) . -s start_time ( .) (postdated) . invalid KDC . start_time . -r renewable_life ( .) renewable_life . -f (forwardable). -F (non-forwardable). -p (proxiable). -P (non-proxiable). -a () . -A . -C (canonicalization) KDC . -E (enterprise name). -v ( invalid) KDC . . -R . . klist(1) KDC (grace period) KDC . clockskew krb5.conf(5) . -k [-i | -t keytab_file] keytab . keytab -t keytab_file -i keytab keytab . . KDC keytab KDB: kinit KDC . . -n (anonymous). . pkinit KDC pkinit_anchors krb5.conf(5) . -n @REALM ( @ ) . KDC . (realm-exposed) . kinit -n . KDC ( ) . . KDC MIT . -I input_ccache . KDC. -T armor_ccache . KDC (armor) . KDC . -c cache_name cache_name () . . . KRB5CCNAME . ( DIR) . kinit . -S service_name . -X attribute[=value] attribute value . . . "yes" . PKINIT : X509_user_identity=value X509 X509_anchors=value (anchor) X509 disable_freshness[=yes] ( ) --request-pac | --no-request-pac . --request-pac KDC PAC authdata --no-request-pac KDC PAC KDC PAC . (ENVIRONMENT) kerberos(7) . (FILES) FILE:/tmp/krb5cc_%{uid} . FILE:/etc/krb5.keytab keytab . (SEE ALSO) klist(1), kdestroy(1), kerberos(7) (AUTHORS) (MIT) (COPYRIGHT) 1985-2026, MIT 1.22.2 KINIT(1)