kdestroy(1m) [hpux man page]

kdestroy(1m)															      kdestroy(1m)

NAME

       kdestroy - Destroys a principal's login context and associated credentials

SYNOPSIS

       kdestroy [-c cache_name] [-e exp_period] [-r max_retry_of_readdir]

OPTIONS

       Specifies  that the login context and associated credentials for cache_name should be destroyed instead of the default cache.  Removes cre-
       dentials that have been expired for a period of time longer than the period of time specified by exp_period.  Specifies the maximum  number
       of retries.

DESCRIPTION

       The  kdestroy  command  destroys  a  principal's login context and the principal's credentials.	Until the credentials are reestablished by
       either executing the dce_login command or the kinit command,  the principal and any processes created by the principal will be  limited	to
       unauthenticated access.

       Specify the expiration period in the following format: {num{interval}}...

       where:  A  number that specifies the number of interval A designator of the time period for num.  interval can be any of the following: w -
       weeks d - days h - hours (default) m - minutes s - seconds

       For example, to destroy credentials that have been expired more than 5 days and 10 hours, the entry would be 5d10h.

FILES

       If the KRB5CCNAME environment variable is set, the default credentials cache.  ([unix_id] is the decimal UNIX ID of the user.)

NOTE

       kdestroy provided under "/usr/bin" is part of Kerberos V5 client product.  For DCE operations use "/opt/dce/bin/kdestroy".

RELATED INFORMATION

       Commands: klist(1m), kinit(1m).

																      kdestroy(1m)

KDESTROY(1)							   MIT Kerberos 						       KDESTROY(1)

NAME

       kdestroy - destroy Kerberos tickets

SYNOPSIS

       kdestroy [-A] [-q] [-c cache_name]

DESCRIPTION

       The  kdestroy utility destroys the user's active Kerberos authorization tickets by overwriting and deleting the credentials cache that con-
       tains them.  If the credentials cache is not specified, the default credentials cache is destroyed.

OPTIONS

       -A     Destroys all caches in the collection, if a cache collection is available.

       -q     Run quietly.  Normally kdestroy beeps if it fails to destroy the user's tickets.	The -q flag suppresses this behavior.

       -c cache_name
	      Use cache_name as the credentials (ticket) cache name and location; if this option is not used, the default cache name and  location
	      are used.

	      The  default  credentials  cache may vary between systems.  If the KRB5CCNAME environment variable is set, its value is used to name
	      the default ticket cache.

NOTE

       Most installations recommend that you place the kdestroy command in your .logout file, so that your  tickets  are  destroyed  automatically
       when you log out.

ENVIRONMENT

       kdestroy uses the following environment variable:

       KRB5CCNAME
	      Location	of  the  default Kerberos 5 credentials (ticket) cache, in the form type:residual.  If no type prefix is present, the FILE
	      type is assumed.	The type of the default cache may determine the availability of a cache collection; for instance, a default  cache
	      of type DIR causes caches within the directory to be present in the collection.

FILES

       FILE:/tmp/krb5cc_%{uid}
	      Default location of Kerberos 5 credentials cache

SEE ALSO

       kinit(1), klist(1)

AUTHOR

       MIT

COPYRIGHT

       1985-2013, MIT

1.11.3																       KDESTROY(1)