KAS(1) —
NAME
kas - suite of commands for contacting the AFS Authentication Server.
SYNOPSIS
kas <option>
Each of the the following operation codes is a valid <option> and has its own set of associated arguments. See the "OPTIONS" section below for syntax definitions.
apropos - search by help text
create - create an entry for a user
debuginfo - show debugging info from AuthServer
delete - delete a user
examine - examine the entry for a user
forgetticket - delete ticket for a specific server
getpassword - get a user’s password
getrandomkey - get a random key
getticket - get a ticket for a specific server
help - get help on commands
interactive - enter interactive mode
list - list all users in database
listtickets - show all cache manager tickets
noauthentication - connect to AuthServer w/o using token
quit - exit program
setfields - set various fields in a user’s entry
setkey - set a user’s key
setpassword - set a user’s password
statistics - show statistics for AuthServer
stringtokey - convert a string to a key
DESCRIPTION
The commands in the kas suite are an interface to the Authentication Server, an AFS server process that performs user authentication and plays a central role in mutual authentication between server and client processes. The "k" in the command names reflects the fact that AFS’s authentication procedures are derived from the Kerberos standard originally developed at the Massuchusetts Institute of Technology’s Project Athena. There are kas commands that allow system administrators to create, modify, examine and delete entries in the Authentication Database.
OPTIONS
apropos - search by help text
syntax: kas apropos -topic <help string> [-help]
create - create an entry for a user
syntax: kas create -name <name of user> [-initial_password <initial password>] [-admin_username <admin principal to use for authentication>] [-password_for_admin <admin password>] [-cell <cell name>] [-servers <explicit list of authentication servers>+] [-help]
debuginfo - show debugging info from AuthServer
syntax: kas debuginfo [-hostname <authentication server host name>] [-admin_username <admin principal to use for authentication>] [-password_for_admin <admin password>] [-cell <cell name>] [-servers <explicit list of authentication servers>+] [-noauth] [-help]
delete - delete a user
syntax: kas delete -name <name of user> [-admin_username <admin principal to use for authentication>] [-password_for_admin <admin password>] [-cell <cell name>] [-servers <explicit list of authentication servers>+] [-help]
alias: kas rm
examine - examine the entry for a user
syntax: kas examine -name <name of user> [-admin_username <admin principal to use for authentication>] [-password_for_admin <admin password>] [-cell <cell name>] [-servers <explicit list of authentication servers>+] [-help]
forgetticket - delete ticket for a specific server
syntax: kas forgetticket [-name <name of server>] [-all] [-help]
getpassword - get a user’s password
syntax: kas getpassword -name <name of user> [-help]
getrandomkey - get a random key
syntax: kas getrandomkey [-help]
getticket - get a ticket for a specific server
syntax: kas getticket -name <server> [-lifetime <ticket lifetime>] [-admin_username <admin principal to use for authentication>] [-password_for_admin <admin password>] [-cell <cell name>] [-servers <explicit list of authentication servers>+] [-help]
help - get help con commands
syntax: kas help [-topic <help string>+] [-help]
interactive - enter interactive mode
syntax: kas interactive [-admin_username <admin principal to use for authentication>] [-password_for_admin <admin password>] [-cell <cell name>] [-servers <explicit list of authentication servers>+] [-noauth] [-help]
list - list all users in database
syntax: kas list [-admin_username <admin principal to use for authentication>] [-password_for_admin <admin password>] [-cell <cell name>] [-servers <explicit list of authentication servers>+] [-help]
alias: kas ls
listtickets - show all cache manager tickets
syntax: kas listtickets [-name <@i[name of server]>] [-long] [-help]
noauthentication - connect to AuthServer w/o using token
syntax: kas noauthentication [-help]
quit - exit program
syntax: kas quit [-help]
setfields - set various fields in a user’s entry
syntax: kas setfields -name <name of user> [-flags <hex flag value or flag name expression>] [-expiration <date of account expiration>] [-lifetime <maximum ticket lifetime>] [-admin_username <admin principal to use for authentication>] [-password_for_admin <admin password>] [-cell <cell name>] [-servers <explicit list of authentication servers>+] [-help]
alias: kas sf
setkey - set a user’s key
syntax: kas setkey -name <name of user> -new_key <eight byte new key> [-kvno <key version number>] [-admin_username <admin principal to use for authentication>] [-password_for_admin <admin password>] [-cell <cell name>] [-servers <explicit list of authentication servers>+] [-help]
setpassword - set a user’s password
syntax: kas setpassword -name <name of user> [-new_password <new password>] [-kvno <key version number>] [-admin_username <admin principal to use for authentication>] [-password_for_admin <admin password>] [-cell <cell name>] [-servers <explicit list of authentication servers>+] [-help]
alias: kas sp
statistics - show statistics for AuthServer
syntax: kas statistics [-admin_username <admin principal to use for authentication>] [-password_for_admin <admin password>] [-cell <cell name>] [-servers <explicit list of authentication servers>+] [-help]
stringtokey - convert a string to a key
syntax: kas stringtokey -string <string> [-cell <cellname>] [-help]
— Last change: 30 April 1990