shishi(1) Shishi client tool


shishi [OPTIONS]... [CLIENT [SERVER]]...


shishi 1.0.2

Shishi command line client. If no command is given, Shishi acquire or list a valid ticket for you, identified by CLIENT (if empty, default username in default realm), for the service SERVER (if empty, ticket granting ticket for client realm).

-h, --help
Print help and exit
-V, --version
Print version and exit


-d, --destroy
Destroy tickets in local cache, limited by any --client-name or --server-name. (default=off)
-l, --list
List tickets in local cache, limited by any --client-name and --server-name. (default=off)
-r, --renew
Renew ticket. Use --server-name to specify ticket, default is the most recent renewable ticket granting ticket for the default realm.


Get a forwardable ticket, i.e., one that can be used to get forwarded tickets. (default=off)
Get a forwarded ticket. (default=off)
Get a proxiable ticket, i.e., one that can be used to get proxy tickets. (default=off)
Get a proxy ticket. (default=off)
Get a renewable ticket. (default=off)


Client name. Default is login username.
-E, --encryption-type=ETYPE,[ETYPE...]
Encryption types to use. ETYPE is either
registered name or integer.
Valid values
include 'aes128', 'aes256', 'aes' (same as 'aes256'), '3des', 'des-md5', 'des-md4', 'des-crc', 'des' (same as 'des-md5'), and 'arcfour'.
-e, --endtime=STRING
Specify when ticket validity should expire. The time syntax may be relative (to the start time), such as '20 hours', or absolute, such as '2001-02-03 04:05:06 CET'. The default is 8 hours after the start time.
Set default realm.
Specify renewable life of ticket. Implies --renewable. Accepts same time syntax as --endtime. If --renewable is specified, the default is 1 week after the start time.
Server name. Default is 'krbtgt/REALM' where REALM is client realm.
-s, --starttime=STRING
Specify when ticket should start to be valid. Accepts same time syntax as --endtime. The default is to become valid immediately.
Service name in ticket to use for authenticating request. Only for TGS. Defaults to 'krbtgt/REALM@REALM' where REALM is client realm.

Other options:

--configuration-file=FILE Read user configuration from FILE.
-c, --ticket-file=FILE
Read tickets from FILE.
-o, --library-options=STRING
Parse STRING as a configuration file statement.
-q, --quiet
Don't produce any diagnostic output. (default=off)
Read system configuration from FILE.
Write tickets from FILE. Default is to write them back to where they were read from.
-v, --verbose
Produce verbose output. Use multiple times to increase amount of information.

Mandatory arguments to long options are mandatory for short options too.


Written by Simon Josefsson.


Report bugs to: [email protected]
GNU Shishi home page: <>
General help using GNU software: <>


Copyright © 2013 Simon Josefsson. License GPLv3+: GNU GPL version 3 or later <>.
This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.