klist

list Kerberos credentials

klist [-c cache | --cache=cache] [-s | -t | --test] [-T | --tokens] [-5 | --v5] [-v | --verbose] [-l | --list-caches] [-f] [--version] [--help]

Displays the current tickets in the credential cache (also known as the ticket file).

Options

-c cache
--cache=cache 		credential cache to list
-s, -t
--test 		Test for there being an active and valid TGT for the local realm of the user in the credential cache.
-T
--tokens 		display AFS tokens
-5
--v5 		display v5 cred cache (this is the default)
-f Include ticket flags in short form, each character stands for a specific flag,
F forwardable
f forwarded
P proxiable
p proxied
D postdate-able
d postdated
R renewable
I initial
i invalid
A pre-authenticated
H hardware authenticated
This information is also output with --verbose , but in a more verbose way.
-v
--verbose		 Verbose output. Include all information:
Server principal the ticket is for
Ticket etype encryption type followed by key version of the ticket
Session key encryption type of the session key, if it's different from the encryption type of the ticket
Auth time when the authentication exchange took place
Start time when that this ticket is valid from (only printed if it's different from the auth time)
End time when the ticket expires
Renew till maximum possible end time of any ticket derived from this one
Ticket flags flags set on the ticket
Addresses set of addresses from which this ticket is valid
-l
--list-caches 		List the credential caches for the current users, not all cache types supports listing multiple caches.
SEE ALSO kdestroy(1), kinit(1) 

> klist
Ticket cache: FILE:/tmp/krb5cc_11188_RQZ7KS
Default principal: dgerman@HCOOP.NET

Valid starting       Expirestomorrow      Service principal
03/21/2025 16:05:29  03/22/2025 02:05:29  krbtgt/HCOOP.NET@HCOOP.NET
	renew  until 03/22/2025 16:05:29
03/21/2025 16:05:29  03/22/2025 02:05:29  afs/hcoop.net@HCOOP.NET
	renew  until 03/22/2025 16:05:29