5.2. Parameters for shishi

If no command is given, Shishi try to make sure you have a ticket granting ticket for the default realm, and then display it.

Mandatory or optional arguments to long options are also mandatory or optional for any corresponding short options.

Usage: shishi [OPTION...] [CLIENT [SERVER]] [OPTION...]
  or:  shishi [OPTION...] --list [CLIENT [SERVER]]
  or:  shishi [OPTION...] --destroy [CLIENT [SERVER]]
  or:  shishi [OPTION...] --string-to-key [CLIENT] [OPTION...]
  or:  shishi [OPTION...]
Shishi -- A Kerberos 5 implementation

      --client-name=NAME     Client name. Default is login username.
  -d, --destroy              Destroy tickets in local cache, subject to
                             --client-name and --server-name limiting.
  -e, --endtime=STRING       Specify when ticket validity should expire.  The
                             time syntax may be relative (to the start time),
                             such as "20 hours", or absolute, such as
                             "2001-02-03 04:05:06 CET". The default is 8 hours
                             after the start time.
  -E, --encryption-type=ETYPE,[ETYPE...]
                             Encryption types to use.  ETYPE is either
                             registered name or integer.
      --force-as             Force AS mode. Default is to use TGS iff a TGT is
                             found.
      --force-tgs            Force TGS mode. Default is to use TGS iff a TGT is
                             found.
      --forwardable          Get a forwardable ticket, i.e., one that can be
                             used to get forwarded tickets.
      --forwarded            Get a forwarded ticket.
  -l, --list                 List tickets in local cache, subject to
                             --server-name limiting.
      --proxiable            Get a proxiable ticket, i.e., one that can be used
                             to get proxy tickets.
      --proxy                Get a proxy ticket.
      --realm=REALM          Realm of server. Default is DNS domain of local
                             host. For AS, this also indicates realm of client.
      --renew-till=STRING    Specify renewable life of ticket.  Implies
                             --renewable.  Accepts same time syntax as
                             --endtime.  If --renewable is specified, the
                             default is 1 week after the start time.
      --renewable            Get a renewable ticket.
  -R, --renew                Renew ticket.  Use --server-name to specify
                             ticket, default is the most recent renewable
                             ticket granting ticket for the default realm.
      --server=[FAMILY:]ADDRESS:SERVICE/TYPE
                             Send all requests to HOST instead of using normal
                             logic to locate KDC addresses (discouraged).
      --server-name=NAME     Server name. Default is "krbtgt/REALM" where REALM
                             is server realm (see --realm).
  -s, --starttime=STRING     Specify when ticket should start to be valid.
                             Accepts same time syntax as --endtime. The default
                             is to become valid immediately.
      --ticket-granter=NAME  Service name in ticket to use for authenticating
                             request. Only for TGS. Defaults to
                             "krbtgt/REALM@REALM" where REALM is server realm
                             (see --realm).

 Options for low-level cryptography (CRYPTO-OPTIONS):
      --client-name=NAME     Username. Default is login name.
      --key-version=INTEGER  Version number of key. Default is 0.
      --parameter=STRING     String-to-key parameter. This data is specific for
                             each encryption algorithm and rarely needed.
      --random               Generate key from random data.
      --realm=REALM          Realm of principal. Defaults to DNS domain of
                             local host.
      --salt=SALT            Salt to use for --string-to-key. Defaults to
                             concatenation of realm and (unwrapped) client
                             name.
      --string-to-key[=[PASSWORD]]
                             Convert password into Kerberos key.  Note that
                             --client-name, --realm, and --salt influence the
                             generated key.

 Other options:
      --configuration-file=FILE   Read user configuration from file.  Default
                             is ~/.shishi/config.
  -c, --ticket-file=FILE     Read tickets from FILE. Default is
                             $HOME/.shishi/tickets.
  -o, --library-options=STRING   Parse STRING as a configuration file
                             statement.
  -q, --quiet, --silent      Don't produce any output.
      --system-configuration-file=FILE
                             Read system wide configuration from file.  Default
                             is /usr/local/etc/shishi.conf.
      --ticket-write-file=FILE   Write tickets to FILE.  Default is to write
                             them back to ticket file.
  -v, --verbose              Produce verbose output.  Use multiple times to
                             increase amount of verbose output.
  CLIENT                     Set client name and realm from NAME.  The
                             --client-name and --realm parameters can be used
                             to override part of NAME.
  SERVER                     Set server name and realm from NAME.  The
                             --server-name and --server-realm parameters can be
                             used to override part of SERVER.

  -?, --help                 Give this help list
      --usage                Give a short usage message
  -V, --version              Print program version