<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html lang="en-us" xml:lang="en-us"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="security" content="public" /> <meta name="Robots" content="index,follow" /> <meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' /> <meta name="DC.Type" content="task" /> <meta name="DC.Title" content="Obtain or renew ticket granting tickets" /> <meta name="abstract" content="The kinit command obtains or renews a Kerberos ticket granting ticket." /> <meta name="description" content="The kinit command obtains or renews a Kerberos ticket granting ticket." /> <meta name="DC.Relation" scheme="URI" content="rzakhmanage.htm" /> <meta name="DC.Relation" scheme="URI" content="kinit.htm" /> <meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" /> <meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 1998, 2006" /> <meta name="DC.Format" content="XHTML" /> <meta name="DC.Identifier" content="rzakhkinit" /> <meta name="DC.Language" content="en-us" /> <!-- All rights reserved. Licensed Materials Property of IBM --> <!-- US Government Users Restricted Rights --> <!-- Use, duplication or disclosure restricted by --> <!-- GSA ADP Schedule Contract with IBM Corp. --> <link rel="stylesheet" type="text/css" href="./ibmdita.css" /> <link rel="stylesheet" type="text/css" href="./ic.css" /> <title>Obtain or renew ticket granting tickets</title> </head> <body id="rzakhkinit"><a name="rzakhkinit"><!-- --></a> <!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script> <h1 class="topictitle1">Obtain or renew ticket granting tickets</h1> <div><p>The <span class="cmdname">kinit</span> command obtains or renews a Kerberos ticket granting ticket. </p> <div class="section"><p> If no ticket options are specified on the <span class="cmdname">kinit</span> command, the options for the Kerberos server that are specified in the Kerberos configuration file are used.</p> <p>If an existing ticket is not being renewed, the credentials cache is re-initialized and contains the new ticket granting ticket received from the Kerberos server. If the principal name is not specified on the command line, the principal name is obtained from the credentials cache. The new credentials cache becomes the default credentials cache unless the cache name is specified by the <tt>-c</tt> option.</p> <p>Ticket time values are expressed as <em>nwndnhnmns</em>, where <em>n</em> represents a number, <em>w</em> indicates weeks, <em>d</em> indicates days, <em>h</em> indicates hours, <em>m</em> indicates minutes, and <em>s</em> indicates seconds. The components must be specified in this order, but any component may be omitted (for example, <em>4h5m</em> represents 4 hours and 5 minutes, and <em>1w2h</em> represents 1 week and 2 hours). If only a number is specified, the default is hours.</p> </div> <div class="p"><span>To obtain a ticket granting ticket that has a lifetime of 5 hours for principal jday choose one of the following:</span><ul><li>On the Qshell command line, enter:<tt>kinit -l 5h Jday</tt></li> <li>On an i5/OS™ control language (CL) command line, enter:<tt>call qsys/qkrbkinit parm('-l' '5h' 'jday')</tt></li> </ul> </div> <div class="section"><p>See the <strong>kinit</strong> usage notes on this Qshell command for specifics on its usage and restrictions.</p> </div> </div> <div> <ul class="ullinks"> <li class="ulchildlink"><strong><a href="kinit.htm">kinit</a></strong><br /> Use the Qshell command <span class="cmdname">kinit</span> to obtain or renew the Kerberos ticket granting ticket .</li> </ul> <div class="familylinks"> <div class="parentlink"><strong>Parent topic:</strong> <a href="rzakhmanage.htm" title="Manage network authentication service by requesting tickets, working with key table files, and administering host name resolution. You can also work with credentials files and back up configuration files.">Manage network authentication service</a></div> </div> </div> </body> </html>