src/java.security.jgss/windows/man/klist.md

---
# Copyright (c) 2005, 2024, Oracle and/or its affiliates. All rights reserved.
# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
#
# This code is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License version 2 only, as
# published by the Free Software Foundation.
#
# This code is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
# FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
# version 2 for more details (a copy is included in the LICENSE file that
# accompanied this code).
#
# You should have received a copy of the GNU General Public License version
# 2 along with this work; if not, write to the Free Software Foundation,
# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
#
# Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
# or visit www.oracle.com if you need additional information or have any
# questions.
#

title: 'KLIST(1) JDK @@VERSION_SHORT@@ | JDK Commands'
date: @@COPYRIGHT_YEAR@@
lang: en
---

## Name

klist - display the entries in the local credentials cache and key table

## Synopsis

`klist` \[`-c` \[`-f`\] \[`-e`\] \[`-a` \[`-n`\]\]\] \[`-k` \[`-t`\] \[`-K`\]\]
\[*name*\] \[`-help`\]

## Description

The `klist` tool displays the entries in the local credentials cache and key
table. After you modify the credentials cache with the `kinit` tool or modify
the keytab with the `ktab` tool, the only way to verify the changes is to view
the contents of the credentials cache or keytab using the `klist` tool. The
`klist` tool doesn't change the Kerberos database.

## Commands

`-c`
:   Specifies that the credential cache is to be listed.

    The following are the options for credential cache entries:

    `-f`
    :   Show credential flags.

    `-e`
    :   Show the encryption type.

    `-a`
    :   Show addresses.

    `-n`
    :   If the `-a` option is specified, don't reverse resolve addresses.

`-k`
:   Specifies that key tab is to be listed.

    List the keytab entries. The following are the options for keytab entries:

    `-t`
    :   Show keytab entry timestamps.

    `-K`
    :   Show keytab entry DES keys.

    `-e`
    :   Shows keytab entry key type.

*name*
:   Specifies the credential cache name or the keytab name. File-based cache or
    keytab's prefix is `FILE:`. If the name isn't specified, the `klist` tool
    uses default values for the cache name and keytab. The `kinit`
    documentation lists these default values.

`-help`
:   Displays instructions.

## Examples

List entries in the keytable specified including keytab entry timestamps and
DES keys:

>   `klist -k -t -K FILE:\temp\mykrb5cc`

List entries in the credentials cache specified including credentials flag and
address list:

>   `klist -c -f FILE:\temp\mykrb5cc`