KIMPERSONATE(8)

NAME
kimpersonate - impersonate a user when there exist a srvtab, keyfile or KeyFile

SYNOPSIS
kimpersonate [-s string --server=string] [-c string --client=string] [-k string --keytab=string] [-5 | --krb5] [-e integer --expire-time=integer] [-a string --client-address=string] [-t string --enc-type=string] [-f string --ticket-flags=string] [--verbose] [--version] [--help]

DESCRIPTION
The kimpersonate program creates a "fake" ticket using the service-key of the service. The service key can be read from a Kerberos 5 keytab, AFS KeyFile or (if compiled with support for Kerberos 4) a Kerberos 4 srvtab. Supported options:

-s string, --server=string
    name of server principal

-c string, --client=string
    name of client principal

-k string, --keytab=string
    name of keytab file

-5, --krb5
    create a Kerberos 5 ticket

-e integer, --expire-time=integer
    lifetime of ticket in seconds

-a string, --client-address=string
    address of client

-t string, --enc-type=string
    encryption type

-f string, --ticket-flags=string
    ticket flags for krb5 ticket

--verbose
    Verbose output

--version
    Print version

--help

FILES
Uses /etc/krb5.keytab, /etc/srvtab and /usr/afs/etc/KeyFile when available and the -k option is used with an appropriate prefix.

EXAMPLES
kimpersonate can be used in samba root preexec option or for debugging. kimpersonate -s host/hummel.e.kth.se@E.KTH.SE -c lha@E.KTH.SE -5 will create a Kerberos 5 ticket for lha@E.KTH.SE for the host hummel.e.kth.se if there exists a keytab entry for it in /etc/krb5.keytab.

SEE ALSO
kinit(1), klist(1)

AUTHORS
Love Hornquist Astrand <lha@kth.se>