KIMPERSONATE(8) BSD System Manager's Manual KIMPERSONATE(8) NNAAMMEE kkiimmppeerrssoonnaattee -- impersonate a user when there exist a srvtab, keyfile or KeyFile SSYYNNOOPPSSIISS kkiimmppeerrssoonnaattee [--ss _s_t_r_i_n_g | ----sseerrvveerr==_s_t_r_i_n_g] [--cc _s_t_r_i_n_g | ----cclliieenntt==_s_t_r_i_n_g] [--kk _s_t_r_i_n_g | ----kkeeyyttaabb==_s_t_r_i_n_g] [--55 | ----kkrrbb55] [--ee _i_n_t_e_g_e_r | ----eexxppiirree--ttiimmee==_i_n_t_e_g_e_r] [--aa _s_t_r_i_n_g | ----cclliieenntt--aaddddrreessss==_s_t_r_i_n_g] [--tt _s_t_r_i_n_g | ----eenncc--ttyyppee==_s_t_r_i_n_g] [--ff _s_t_r_i_n_g | ----ttiicckkeett--ffllaaggss==_s_t_r_i_n_g] [----vveerrbboossee] [----vveerrssiioonn] [----hheellpp] DDEESSCCRRIIPPTTIIOONN The kkiimmppeerrssoonnaattee program creates a "fake" ticket using the service-key of the service. The service key can be read from a Kerberos 5 keytab, AFS KeyFile or (if compiled with support for Kerberos 4) a Kerberos 4 srvtab. Supported options: --ss _s_t_r_i_n_g, ----sseerrvveerr==_s_t_r_i_n_g name of server principal --cc _s_t_r_i_n_g, ----cclliieenntt==_s_t_r_i_n_g name of client principal --kk _s_t_r_i_n_g, ----kkeeyyttaabb==_s_t_r_i_n_g name of keytab file --55, ----kkrrbb55 create a Kerberos 5 ticket --ee _i_n_t_e_g_e_r, ----eexxppiirree--ttiimmee==_i_n_t_e_g_e_r lifetime of ticket in seconds --aa _s_t_r_i_n_g, ----cclliieenntt--aaddddrreessss==_s_t_r_i_n_g address of client --tt _s_t_r_i_n_g, ----eenncc--ttyyppee==_s_t_r_i_n_g encryption type --ff _s_t_r_i_n_g, ----ttiicckkeett--ffllaaggss==_s_t_r_i_n_g ticket flags for krb5 ticket ----vveerrbboossee Verbose output ----vveerrssiioonn Print version ----hheellpp FFIILLEESS Uses _/_e_t_c_/_k_r_b_5_._k_e_y_t_a_b_, _/_e_t_c_/_s_r_v_t_a_b and _/_u_s_r_/_a_f_s_/_e_t_c_/_K_e_y_F_i_l_e when avail- able and the --kk option is used with an appropriate prefix. EEXXAAMMPPLLEESS kkiimmppeerrssoonnaattee can be used in ssaammbbaa root preexec option or for debugging. kkiimmppeerrssoonnaattee -s host/hummel.e.kth.se@E.KTH.SE -c lha@E.KTH.SE -5 will create a Kerberos 5 ticket for lha@E.KTH.SE for the host hummel.e.kth.se if there exists a keytab entry for it in _/_e_t_c_/_k_r_b_5_._k_e_y_t_a_b. SSEEEE AALLSSOO kinit(1), klist(1) AAUUTTHHOORRSS Love Hornquist Astrand Heimdal September 18, 2006 Heimdal