tail head cat sleep
QR code linking to this page

Manual Pages  — KIMPERSONATE

NAME

kimpersonate – impersonate a user when there exist a srvtab, keyfile or KeyFile

CONTENTS

SYNOPSIS


kimpersonate [-s string | -server= string] [-c string | -client= string] [-k string | -keytab= string] [-5 | -krb5] [-e integer | -expire-time= integer] [-a string | -client-address= string] [-t string | -enc-type= string] [-f string | -ticket-flags= string] [-verbose] [-version] [-help]

DESCRIPTION

The kimpersonate program creates a "fake" ticket using the service-key of the service. The service key can be read from a Kerberos 5 keytab, AFS KeyFile or (if compiled with support for Kerberos 4) a Kerberos 4 srvtab. Supported options:
-s string, -server= string
  name of server principal
-c string, -client= string
  name of client principal
-k string, -keytab= string
  name of keytab file
-5 -, -krb5
  create a Kerberos 5 ticket
-e integer, -expire-time= integer
  lifetime of ticket in seconds
-a string, -client-address= string
  address of client
-t string, -enc-type= string
  encryption type
-f string, -ticket-flags= string
  ticket flags for krb5 ticket
-verbose
  Verbose output
-version
  Print version
-help
 

FILES

Uses /etc/krb5.keytab, /etc/srvtab and /usr/afs/etc/KeyFile when available and the -k option is used with an appropriate prefix.

EXAMPLES

kimpersonate can be used in samba root preexec option or for debugging. kimpersonate -s host/hummel.e.kth.se@E.KTH.SE -c lha@E.KTH.SE -5 will create a Kerberos 5 ticket for lha@E.KTH.SE for the host hummel.e.kth.se if there exists a keytab entry for it in /etc/krb5.keytab.

SEE ALSO

kinit(1), klist(1)

AUTHORS

Love Hornquist Astrand <lha@kth.se>

Heimdal KIMPERSONATE (8) September 18, 2006

tail head cat sleep
QR code linking to this page


Please direct any comments about this manual page service to Ben Bullock. Privacy policy.