Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am in the process of debugging a Kerberos setup. I have a valid krb5.conf and I can call kinit USERNAME to get a Ticket Granting Ticket (TGT):

Credentials cache: /root/krb5cc_root
Default principal: USERNAME@EXAMPLE.COM
Number of entries: 1

[1] Service principal: krbtgt/EXAMPLE.COM@EXAMPLE.COM
        Valid starting: Wednesday, June 4, 2014 at 10:02:29 PM
        Expires: Thursday, June 5, 2014 at 8:02:29 AM

I would like to use that TGT to request a Kerberos service ticket on the command line, so I can look at it with klist. It will help with debugging a Kerberos problem I am trying to solve.

Is there a command or program to retreive a Kerberos service ticket for a given service ?

share|improve this question
up vote 2 down vote accepted

kvno service

acquires a service ticket for the specified Kerberos principals and prints out the key version numbers

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.