2 .\" Copyright 1987, 1989 by the Student Information Processing Board of the Massachusetts Institute of Technology. For copying and distribution information, please see the file kerberosv5/mit-sipb-copyright.h.
3 .\" Portions Copyright (c) 2004, Sun Microsystems, Inc. All Rights Reserved
4 .\" The contents of this file are subject to the terms of the Common Development and Distribution License (the "License"). You may not use this file except in compliance with the License.
5 .\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing. See the License for the specific language governing permissions and limitations under the License.
6 .\" When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE. If applicable, add the following below this CDDL HEADER, with the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
7 .TH KDESTROY 1 "Apr 30, 2004"
9 kdestroy \- destroy Kerberos tickets
13 \fB/usr/bin/kdestroy\fR [\fB-q\fR] [\fB-c\fR \fIcache_name\fR]
19 The \fBkdestroy\fR utility destroys the user's active Kerberos authorization
20 tickets by writing zeros to the specified credentials cache that contains them.
21 If the credentials cache is not specified, the default credentials cache is
22 destroyed. If the credentials cache does not exist, \fBkdestroy\fR displays a
23 message to that effect.
26 After overwriting the cache, \fBkdestroy\fR removes the cache from the system.
27 The utility displays a message indicating the success or failure of the
28 operation. If \fBkdestroy\fR is unable to destroy the cache, it will warn you
29 by making your terminal beep.
32 If desired, you can place the \fBkdestroy\fR command in your \fB\&.logout\fR
33 file so that your tickets are destroyed automatically when you logout.
37 The following options are supported:
41 \fB\fB-c\fR \fIcache_name\fR\fR
44 Uses \fIcache_name\fR as the credentials (ticket) cache name and location. If
45 this option is not used, the default cache name and location are used.
54 Runs quietly. Your terminal will not beep when \fBkdestroy\fR fails to destroy
58 .SH ENVIRONMENT VARIABLES
61 \fBkdestroy\fR uses the following environment variable:
65 \fB\fBKRB5CCNAME\fR\fR
68 Location of the credentials (ticket) cache. See \fBkrb5envvar\fR(5) for syntax
76 \fB\fB/tmp/krb5cc_\fIuid\fR\fR\fR
79 Default credentials cache (\fIuid\fR is the decimal \fBUID\fR of the user).
85 See \fBattributes\fR(5) for descriptions of the following attributes:
93 ATTRIBUTE TYPE ATTRIBUTE VALUE
95 Interface Stability Evolving
97 Command arguments Evolving
99 Command output Unstable
105 \fBkinit\fR(1), \fBklist\fR(1), \fBattributes\fR(5), \fBkerberos\fR(5),
110 Only the tickets in the specified credentials cache are destroyed. Separate
111 ticket caches are used to hold root instance and password changing tickets.
112 These files should probably be destroyed too, or all of a user's tickets should
113 be kept in a single credential cache.