Generating TGTs for the MIT Kerberos Client Library

Review the instructions to generate TGTs for the MIT Kerberos Client Library.

  1. Start the kinit utility at the command line:
    % kinit
  2. Enter the kinit user name, such as your_name@YOUR.REALM.
  3. Enter the password for your_name@YOUR.REALM, such as my_password. When you enter your password, the kinit utility submits a request to the Authentication Server for a Ticket Granting Ticket (TGT).

    The password is used to compute a key, which in turn is used to decrypt part of the response. The response contains the confirmation of the request, as well as the session key. If you entered your password correctly, you now have a TGT.

  4. Verify that you have a TGT by entering at the command line:
    % klist

    The results of the klist command should be:

    Ticket cache: /var/tmp/krb5cc_1234
    Default principal: your_name@YOUR.REALM
    Valid starting      Expires            Service principal
    24-Jul-95 12:58:02  24-Jul-95 20:58:15  krbtgt/YOUR.REALM@YOUR.REALM