Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

tokens(1) [osf1 man page]

TOKENS(1)						       AFS Command Reference							 TOKENS(1)

NAME
tokens, tokens.krb - Displays the issuer's tokens SYNOPSIS
tokens [-help] tokens [-h] tokens.krb [-help] tokens.krb [-h] DESCRIPTION
The tokens command displays all tokens (tickets) cached on the local machine for the issuer. AFS server processes require that their clients present a token as evidence that they have authenticated in the server's local cell. The (mostly obsolete) tokens.krb command is the same as tokens except that it also displays the user's Kerberos v4 ticket cache. OPTIONS
-help Prints the online help for this command. All other valid options are ignored. OUTPUT
The output lists one token for each cell in which the user is authenticated. The output indicates the o User's AFS UID, if it is available for display. o Server for which the token is valid (normally, afs). This includes a cell specification. o Day and time the token expires. The output of the Kerberos version of this command, tokens.krb, also reports the following about the Kerberos ticket-granting ticket: the ticket owner, which Kerberos ticket-granting service that issued the ticket (for example, "krbtgt.ABC.COM"), and ticket's expiration date. The string "--End of list--" appears at the end of the output. If the user is not authenticated in any cell, this line is all that appears. EXAMPLES
The following example shows the output when the issuer is not authenticated in any cell. % tokens Tokens held by the Cache Manager: --End of list-- The following example shows the output when the issuer is authenticated in ABC Corporation cell, where he or she has AFS UID 1000. % tokens Tokens held by the Cache Manager: User's (AFS ID 1000) tokens for afs@abc.com [Expires Jan 2 10:00] --End of list-- The following example shows the output when the issuer is authenticated in the ABC Corporation cell, the State University cell, and the XYZ Company cell. The user has different AFS UIDs in the three cells. Tokens for last cell are expired: % tokens Tokens held by the Cache Manager: User's (AFS ID 1000) tokens for afs@abc.com [Expires Jan 3 10:00] User's (AFS ID 4286) tokens for afs@stateu.edu [Expires Jan 3 1:34] User's (AFS ID 22) tokens for afs@xyz.com [>>Expired<] --End of list-- The following example shows the output when the issuer uses the tokens.krb version of the command after authenticating in the ABC Corporation cell using the klog.krb command. % tokens.krb Tokens held by the Cache Manager: User's (AFS ID 1000) tokens for afs@abc.com [Expires Jan 31 00:09] User smiths tokens for krbtgt.ABC.COM@abc.com [Expires Jan 31 00:09] --End of list-- PRIVILEGE REQUIRED
None SEE ALSO
klog(1), unlog(1) COPYRIGHT
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved. This documentation is covered by the IBM Public License Version 1.0. It was converted from HTML to POD by software written by Chas Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell. OpenAFS 2012-03-26 TOKENS(1)

Check Out this Related Man Page

KAS_LISTTICKETS(8)					       AFS Command Reference						KAS_LISTTICKETS(8)

NAME
kas_listtickets - Displays all of the issuer's tickets (tokens) SYNOPSIS
kas listtickets [-name <name of server>] [-long] [-help] kas listt [-n <name of server>] [-l] [-h] DESCRIPTION
The kas listtickets command displays the associated user ID (AFS UID), cell name, and expiration date of some or all of the issuer's tickets (tokens), depending on which options are provided: o To display all tokens, provide neither the -name argument nor -long flag. The output is similar to that of the tokens command. o To display a single token, provide the -name argument to specify name of the Authentication Database entry for the entity that accepts the token. All AFS server processes accept tokens sealed with the key from the "afs" entry. o To display in addition the octal numbers that constitute the token and session key, provide the -long flag. OPTIONS
-name <name of server> Names the Authentication Database entry of the entity (usually a server process) that accepts the token to display. -long Displays the octal numbers that constitute the session key and ticket. -help Prints the online help for this command. All other valid options are ignored. OUTPUT
The output reports the AFS UID of the user who owns the token, the service (usually, "afs") and cell for which it is valid, and its expiration date, using the following format. If the message does not specify a cell, the ticket is for the local cell. User's (AFS ID <AFS UID>) tokens for <service>[@<cellname>] [Expires <date>] If the -long flag is provided, the output also includes the octal numbers making up the session key and token, along with the key version number and the number of bytes in the token (if the number of bytes is not 56, there is an error). If the marker "[>> POSTDATED <]" appears instead of an expiration date, the ticket does not become valid until the indicated time. (Only internal calls can create a postdated ticket; there is no standard interface that allows users to do this.) EXAMPLES
The following two examples are for a user with AFS UID 1020 in the "abc.com" cell and AFS UID 35 in the "test.abc.com" cell. He is working on a machine in the first cell and is authenticated in both cells. % kas listtickets User's (AFS ID 1020) tokens for afs [Expires Wed Mar 31 9:30:54 1999] User's (AFS ID 35@test.abc.com) tokens for afs@test.abc.com [Expires Wed Mar 31 13:54:26 1999] % kas listtickets -name afs -long User's (AFS ID 1020) tokens for afs [Expires Wed Mar 31 9:30:54 1999] SessionKey: 3752053512273231026313 Ticket: (kvno = 0, len = 56): 33052211562032783125816133... PRIVILEGE REQUIRED
None, and no password is required. SEE ALSO
kas(8), tokens(1) COPYRIGHT
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved. This documentation is covered by the IBM Public License Version 1.0. It was converted from HTML to POD by software written by Chas Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell. OpenAFS 2012-03-26 KAS_LISTTICKETS(8)
Man Page