openafs/doc/xml/AdminReference/sect1/tokens.xml

<?xml version="1.0" encoding="UTF-8"?>
<refentry id="tokens1">
  <refmeta>
    <refentrytitle>tokens</refentrytitle>
    <manvolnum>1</manvolnum>
  </refmeta>
  <refnamediv>
    <refname>tokens</refname>
    <refpurpose>Displays the issuer's tokens</refpurpose>
  </refnamediv>
  <refsect1>
    <title>Synopsis</title>
    <para><emphasis role="bold">tokens</emphasis> [<emphasis role="bold">-help</emphasis>]</para>

    <para><emphasis role="bold">tokens</emphasis> [<emphasis role="bold">-h</emphasis>]</para>

  </refsect1>
  <refsect1>
    <title>Description</title>
    <para>The tokens command displays all tokens (tickets) cached on the local
    machine for the issuer. AFS server processes require that their clients
    present a token as evidence that they have authenticated in the server's
    local cell.</para>

  </refsect1>
  <refsect1>
    <title>Options</title>
    <variablelist>
      <varlistentry>
        <term><emphasis role="bold">-help</emphasis></term>
        <listitem>
          <para>Prints the online help for this command. All other valid options are
          ignored.</para>

        </listitem>
      </varlistentry>
    </variablelist>
  </refsect1>
  <refsect1>
    <title>Output</title>
    <para>The output lists one token for each cell in which the user is
    authenticated. The output indicates the</para>

    <itemizedlist>
      <listitem>
        <para>User's AFS UID, if it is available for display.</para>

      </listitem>
      <listitem>
        <para>Server for which the token is valid (normally, afs).  This includes a cell
        specification.</para>

      </listitem>
      <listitem>
        <para>Day and time the token expires.</para>

      </listitem>
    </itemizedlist>
    <para>The output of the Kerberos version of this command, <emphasis role="bold">tokens.krb</emphasis>, also
    reports the following about the Kerberos ticket-granting ticket: the
    ticket owner, which Kerberos ticket-granting service that issued the
    ticket (for example, <computeroutput>krbtgt.ABC.COM</computeroutput>), and ticket's expiration date.</para>

    <para>The string <computeroutput>--End of list--</computeroutput> appears at the end of the output. If the
    user is not authenticated in any cell, this line is all that appears.</para>

  </refsect1>
  <refsect1>
    <title>Examples</title>
    <para>The following example shows the output when the issuer is not
    authenticated in any cell.</para>

<programlisting>
   % tokens
   Tokens held by the Cache Manager:

</programlisting>
<programlisting>
      --End of list--

</programlisting>
        <para>The following example shows the output when the issuer is authenticated in
        ABC Corporation cell, where he or she has AFS UID 1000.</para>

<programlisting>
   % tokens
   Tokens held by the Cache Manager:

</programlisting>
<programlisting>
   User's (AFS ID 1000) tokens for afs@abc.com [Expires Jan 2 10:00]
      --End of list--

</programlisting>
            <para>The following example shows the output when the issuer is authenticated in
            the ABC Corporation cell, the State University cell, and the XYZ Company
            cell. The user has different AFS UIDs in the three cells. Tokens for last
            cell are expired:</para>

<programlisting>
   % tokens
   Tokens held by the Cache Manager:

</programlisting>
<programlisting>
   User's (AFS ID 1000) tokens for afs@abc.com [Expires Jan 3 10:00]
   User's (AFS ID 4286) tokens for afs@stateu.edu [Expires Jan 3 1:34]
   User's (AFS ID 22) tokens for afs@xyz.com [&amp;gt;&amp;gt;Expired&amp;lt;]
      --End of list--

</programlisting>
                <para>The following example shows the output when the issuer uses the
                <emphasis role="bold">tokens.krb</emphasis> version of the command after authenticating in the ABC
                Corporation cell using the <emphasis role="bold">klog.krb</emphasis> command.</para>

<programlisting>
   % tokens.krb
   Tokens held by the Cache Manager:

</programlisting>
<programlisting>
   User's (AFS ID 1000) tokens for afs@abc.com [Expires Jan 31 00:09]
   User smiths tokens for krbtgt.ABC.COM@abc.com [Expires Jan 31 00:09]
      --End of list--

</programlisting>
                  </refsect1>
                  <refsect1>
                    <title>Privilege Required</title>
                    <para>None</para>

                  </refsect1>
                  <refsect1>
                    <title>See Also</title>
                    <para><link linkend="klog1">klog(1)</link>,
                    <link linkend="unlog1">unlog(1)</link></para>

                  </refsect1>
                  <refsect1>
                    <title>Copyright</title>
                    <para>IBM Corporation 2000. &lt;http://www.ibm.com/&gt; All Rights Reserved.</para>

                    <para>This documentation is covered by the IBM Public License Version 1.0.  It was
                    converted from HTML to POD by software written by Chas Williams and Russ
                    Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.</para>

                  </refsect1>
                </refentry>