klist(1) on Solnix vs Linux and the BSDs
On Solnix, klist is the illumos klist at /usr/bin/klist. It takes MIT-style short options (-k, -K, -e, -a, -n, -t) like FreeBSD. NetBSD's klist is a different option set where -t and -s mean 'test for a valid TGT' and -v means verbose. Solnix -t shows keytab timestamps.
The manual pages
- Solnix: klist(1) from
pkgs.solnix.illumos-world-man· illumos.org - FreeBSD: klist(1) 15.1-RELEASE
- NetBSD: klist(1) 11.0
What Solnix runs
A default Solnix system runs the illumos klist at /usr/bin/klist. No other variants are shipped. The Solnix page documents no cache-collection options (-l, -A), no -C, -d or -V, and no long options.
Differences
| Compared with | Topic | What differs |
|---|---|---|
| NetBSD | -t meaning | Solnix klist -t shows keytab entry timestamps and only goes with -k. NetBSD klist -t (also -s, --test) tests for an active, valid TGT for the local realm. The same flag means different things.Source: Solnix klist(1) -t; NetBSD klist(1) -s, -t, --test |
| NetBSD | -s meaning and exit status | Solnix -s runs silently and exits 0 if a credentials cache is found, 1 if not or if the local-realm TGT has expired. NetBSD -s is a synonym for the TGT test; its page documents no exit status or silence.Source: Solnix klist(1) -s; NetBSD klist(1) -s, -t, --test |
| FreeBSD | -s exit condition | FreeBSD -s exits 1 if the cache cannot be read or is expired, and 0 otherwise. Solnix -s exits 1 if no cache is found or the local-realm TGT has expired. The wording differs, so edge cases may not match.Source: FreeBSD klist(1) -s; Solnix klist(1) -s |
| NetBSD | keytab and key options | Solnix klist has -k, -K and -e for keytabs and encryption types. The NetBSD page documents none of them. NetBSD -v prints server, ticket etype, session key etype, times, flags and addresses, and Solnix has no -v.Source: Solnix klist(1) -k, -K, -e; NetBSD klist(1) SYNOPSIS, -v, --verbose |
| NetBSD | cache argument | Solnix takes the cache as an optional positional cache_name, with -c listing a credentials cache (the default). NetBSD requires -c cache or --cache=cache to name the cache.Source: Solnix klist(1) SYNOPSIS, -c; NetBSD klist(1) -c cache, --cache=cache |
| FreeBSD, NetBSD | listing multiple caches | FreeBSD has -l (table of caches in a collection) and -A (contents of all caches). NetBSD has -l, --list-caches. The Solnix page documents no equivalent: it lists one cache.Source: FreeBSD klist(1) -l, -A; NetBSD klist(1) -l, --list-caches; Solnix klist(1) SYNOPSIS |
| FreeBSD | options only on FreeBSD | FreeBSD has -C (config data in the cache), -i (default client keytab with -k), -d (authdata types) and -V (Kerberos version). The Solnix page documents none of these.Source: FreeBSD klist(1) -C, -i, -d, -V; Solnix klist(1) OPTIONS |
| NetBSD | -f flag letters | Solnix -f can show 14 flag letters, including O (okay as delegate), T (transit policy checked) and a (anonymous). The NetBSD -f list has 11 letters and omits those three. FreeBSD lists the same 14 as Solnix.Source: Solnix klist(1) -f; NetBSD klist(1) -f; FreeBSD klist(1) -f |
| NetBSD | AFS tokens | NetBSD klist -T, --tokens displays AFS tokens, and -5, --v5 selects the v5 cache (the default). The Solnix page documents neither.Source: NetBSD klist(1) -T, --tokens, -5, --v5; Solnix klist(1) OPTIONS |
| NetBSD | default cache and KRB5CCNAME | Solnix documents the default cache as /tmp/krb5cc_uid and KRB5CCNAME as its override. FreeBSD says KRB5CCNAME locates the default cache. The NetBSD page mentions neither the default location nor KRB5CCNAME. Source: Solnix klist(1) DESCRIPTION, ENVIRONMENT VARIABLES; FreeBSD klist(1) DESCRIPTION; NetBSD klist(1) |
| FreeBSD | address display | Solnix -a translates numeric addresses to host names through the configured nameservice when possible, and -n turns that off. FreeBSD -a and -n are described only as listing addresses and showing numeric addresses.Source: Solnix klist(1) -a, -n; FreeBSD klist(1) -a, -n |
Standards
- POSIX: klist is not a POSIX.1-2024 utility.
- Solnix: Interface Stability: the command arguments are Evolving. The command output is Unstable.
- FreeBSD: The FreeBSD page has no STANDARDS section.
- NetBSD: The NetBSD page has no STANDARDS section.
Writing portable scripts
- Do not use
-sor-tin portable scripts. Solnix-sis silent with an exit status and-tis for keytabs, but NetBSD treats both as a TGT test. - Output is Unstable on Solnix and differs between systems, so do not parse klist output. Prefer the exit status of klist
-son Solnix and FreeBSD.
Every difference here is taken from the manual pages linked above: Solnix's published page, Linux (man-pages and the GNU and util-linux manuals), FreeBSD, OpenBSD and NetBSD. Each row names its source. Where a manual is silent, this page is too. Compiled 2026-10-26. Found a mistake? Mail hackers@lists.solnix.io.