NAME

kdestroy − Destroys a principal’s login context and associated credentials

SYNOPSIS

kdestroy [-c cache_name] [-e exp_period]

OPTIONS

-c cache_nameSpecifies that the login context and associated credentials for cache_name should be destroyed instead of the default cache. 

-e exp_periodRemoves credentials that have been expired for a period of time longer than the period of time specified by exp_period. 

DESCRIPTION

The kdestroy command destroys a principal’s login context and the principal’s credentials.  Until the credentials are reestablished by either executing the dce_login command or the kinit command,  the principal and any processes created by the principal will be limited to unauthenticated access.  Specify the expiration period in the following format: {num{interval}}... where:

numA number that specifies the number of interval

intervalA designator of the time period for num.  interval can be any of the following:

•w − weeks

•d − days

•h − hours (default)

•m − minutes

•s − seconds

For example, to destroy credentials that have been expired more than 5 days and 10 hours, the entry would be 5d10h. 

FILES

/tmp/krb5cc_[unix_id]If the KRB5CCNAME environment variable is set, the default credentials cache.  ([unix_id] is the decimal UNIX ID of the user.) 

RELATED INFORMATION

Commands: klist(1m), kinit(1m). 

Hewlett-Packard Company  —  OSF DCE 1.1/HP DCE 1.5