'\" te
.\" Copyright 1987, 1989 by the Student Information Processing Board of the Massachusetts Institute of Technology.  For copying and distribution information,  please see the file kerberosv5/mit-sipb-copyright.h.
.\" Portions Copyright (c) 2004, Sun Microsystems, Inc.  All Rights Reserved
.TH kdestroy 1 "30 Apr 2004" "SunOS 5.11" "User Commands"
.SH NAME
kdestroy \- destroy Kerberos tickets
.SH SYNOPSIS
.LP
.nf
\fB/usr/bin/kdestroy\fR [\fB-q\fR] [\fB-c\fR \fIcache_name\fR]
.fi

.SH DESCRIPTION
.sp
.LP
The \fBkdestroy\fR utility destroys the user's active Kerberos authorization tickets by writing zeros to the specified credentials cache that contains them. If the credentials cache is not specified, the default credentials cache is destroyed. If the credentials cache does not exist, \fBkdestroy\fR displays a message to that effect.
.sp
.LP
After overwriting the cache, \fBkdestroy\fR removes the cache from the system. The utility displays a message indicating the success or failure of the operation. If \fBkdestroy\fR is unable to destroy the cache, it will warn you by making your terminal beep.
.sp
.LP
If desired, you can place the \fBkdestroy\fR command in your \fB\&.logout\fR file so that your tickets are destroyed automatically when you logout.
.SH OPTIONS
.sp
.LP
The following options are supported:
.sp
.ne 2
.mk
.na
\fB\fB-c\fR \fIcache_name\fR\fR
.ad
.RS 17n
.rt  
Uses \fIcache_name\fR as the credentials (ticket) cache name and location. If this option is not used, the default cache name and location are used.
.RE

.sp
.ne 2
.mk
.na
\fB\fB-q\fR\fR
.ad
.RS 17n
.rt  
Runs quietly. Your terminal will not beep when \fBkdestroy\fR fails to destroy the tickets.
.RE

.SH ENVIRONMENT VARIABLES
.sp
.LP
\fBkdestroy\fR uses the following environment variable:
.sp
.ne 2
.mk
.na
\fB\fBKRB5CCNAME\fR\fR
.ad
.RS 14n
.rt  
Location of the credentials (ticket) cache. See \fBkrb5envvar\fR(5) for syntax and details.
.RE

.SH FILES
.sp
.ne 2
.mk
.na
\fB\fB/tmp/krb5cc_\fIuid\fR\fR\fR
.ad
.RS 19n
.rt  
Default credentials cache (\fIuid\fR is the decimal \fBUID\fR of the user).
.RE

.SH ATTRIBUTES
.sp
.LP
See \fBattributes\fR(5) for descriptions of the following attributes:
.sp

.sp
.TS
tab() box;
cw(2.75i) |cw(2.75i) 
lw(2.75i) |lw(2.75i) 
.
ATTRIBUTE TYPEATTRIBUTE VALUE
_
Availabilityservice/security/kerberos-5
_
Interface StabilityCommitted
_
Command argumentsCommitted
_
Command outputUncommitted
.TE

.SH SEE ALSO
.sp
.LP
\fBkinit\fR(1), \fBklist\fR(1), \fBattributes\fR(5), \fBkerberos\fR(5), \fBkrb5envvar\fR(5)
.SH BUGS
.sp
.LP
Only the tickets in the specified credentials cache are destroyed. Separate ticket caches are used to hold root instance and password changing tickets. These files should probably be destroyed too, or all of a user's tickets should be kept in a single credential cache.