1 files changed, 88 insertions, 6 deletions
diff --git a/crypto/heimdal/kuser/klist.1 b/crypto/heimdal/kuser/klist.1
index e875401..384ce8e 100644
--- a/crypto/heimdal/kuser/klist.1
+++ b/crypto/heimdal/kuser/klist.1
@@ -1,36 +1,118 @@
-.\" $Id: klist.1,v 1.4 1999/05/14 14:03:55 assar Exp $
+.\" $Id: klist.1,v 1.6 2000/07/08 20:47:58 joda Exp $
 .\"
-.Dd Aug 27, 1997
+.Dd July 8, 2000
 .Dt KLIST 1
 .Os HEIMDAL
 .Sh NAME
 .Nm klist
 .Nd
-list the current tickets
+list Kerberos credentials
 .Sh SYNOPSIS
 .Nm
-.Op Fl t | Fl -test
+.Oo Fl c Ar cache \*(Ba Xo
+.Fl -cache= Ns Ar cache Oc
+.Xc
+.Op Fl s | Fl t | Fl -test
+.Op Fl 4 | Fl -v4
+.Op Fl T | Fl -tokens
+.Op Fl 5 | Fl -v5
 .Op Fl v | Fl -verbose
+.Op Fl f
 .Op Fl -version
 .Op Fl -help
 .Sh DESCRIPTION
 .Nm
 reads and displays the current tickets in the crential cache (also
-knows as the ticket file).
+known as the ticket file).
 .Pp
 Options supported:
 .Bl -tag -width Ds
 .It Xo
+.Fl c Ar cache Ns ,
+.Fl -cache= Ns Ar cache
+.Xc
+credentials cache to list
+.It Xo
+.Fl s Ns ,
 .Fl t Ns ,
 .Fl -test
 .Xc
 Test for there being an active and valid TGT for the local realm of
 the user in the credential cache.
 .It Xo
+.Fl 4 Ns ,
+.Fl -v4
+.Xc
+display v4 tickets
+.It Xo
+.Fl T Ns ,
+.Fl -tokens
+.Xc
+display AFS tokens
+.It Xo
+.Fl 5 Ns ,
+.Fl -v5
+.Xc
+display v5 cred cache (this is the default)
+.It Fl f
+Include ticket flags in short form, each charcted stands for a
+specific flag, as follows:
+.Bl -tag -width  XXX -compact -offset indent
+.It F
+forwardable
+.It f
+forwarded
+.It P
+proxiable
+.It p
+proxied
+.It D
+postdate-able
+.It d
+postdated
+.It R
+renewable
+.It I
+initial
+.It i
+invalid
+.It A
+pre-authenticated
+.It H
+hardware authenticated
+.El
+
+This information is also output with the 
+.Fl -verbose
+option, but in a more verbose way.
+.It Xo
 .Fl v Ns ,
 .Fl -verbose
 .Xc
-Verbose output. Include all information from tickets.
+Verbose output. Include all possible information:
+.Bl -tag -width XXXX -offset indent
+.It Server
+the princial the ticket is for
+.It Ticket etype
+the encryption type use in the ticket, followed by the key version of
+the ticket, if it is available
+.It Session key
+the encryption type of the session key, if it's different from the
+encryption type of the ticket
+.It Auth time
+the time the authentication exchange took place
+.It Start time
+the time that this tickets is valid from (only printed if it's
+different from the auth time)
+.It End time
+when the ticket expires, if it has already expired this is also noted
+.It Renew till
+the maximum possible end time of any ticket derived from this one
+.It Ticket flags
+the flags set on the ticket
+.It Addresses
+the set of addresses from which this ticket is valid
+.El
 .El
 .Sh SEE ALSO
 .Xr kinit 1 ,