Is there a "batchable" way to do ktutil list

Robbie Harwood rharwood at redhat.com
Mon May 3 11:19:24 EDT 2021


James Ralston <ralston at pobox.com> writes:

> But still.  Not being able to get machine-readable output out of klist
> turns what should be simple and useful scripting tasks, such as "scan
> the 9 different TGTs in my credential cache collection and renew any
> that expire in less than 12 hours", into "whee, I guess I'm writing a
> finite-state automaton in shell again".

If you're using GSSAPI, you may be able to skip this entirely by using
keytabs/client keytabs:
https://web.mit.edu/kerberos/krb5-latest/doc/basic/keytab_def.html#default-client-keytab

Thanks,
--Robbie
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 861 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20210503/61762d4d/attachment.bin


More information about the Kerberos mailing list