=head1 NAME

kas interactive - Enters interactive mode

=head1 SYNOPSIS

kas interactive [B<-admin_username> I<admin principal to use for authentication>]
[B<-password_for_admin> I<admin password>]  [B<-cell> I<cell name>]
[B<-servers> I<explicit list of authentication servers> ...]
[B<-noauth>]  [B<-help>]

kas i [B<-a> I<admin principal to use for authentication>]
[B<-p> I<admin password>]  [B<-c> I<cell name>]
[B<-s> I<explicit list of authentication servers> ...]  [B<-n>]  [B<-h>]

=head1 DESCRIPTION

The C<kas interactive> command establishes an interactive session for the
issuer of the command. By default, the command interpreter establishes
an authenticated connection for the user logged into the local file
system with all of the Authentication Servers listed in the local
B</usr/vice/etc/CellServDB> file for the cell named in the local
B</usr/vice/etc/ThisCell> file. To specify an alternate identity, cell
name, or list of Authentication Servers, include the B<-admin_username>,
B<-cell>, or B<-servers> arguments respectively. Interactive mode lasts for
six hours unless the maximum ticket lifetime for the issuer or the
Authentication Server's Ticket Granting Service is shorter.

There are two other ways to enter interactive mode, in addition to the
C<kas interactive> command:

=over

=item 1.

Type the C<kas> command at the shell prompt without any operation
code. If appropriate, include one or more of the B<-admin_username>,
B<-password_for_admin>, B<-cell>, and B<-servers> arguments.

=item 2.

Type the C<kas> command followed by a user name and cell name,
separated by an @ sign (for example: C<kas admin@abc.com>), to
establish a connection under the specified identity with the
Authentication Servers listed in the local
B</usr/vice/etc/CellServDB> file for the indicated cell. If
appropriate, provide the B<-servers> argument to specify an alternate
list of Authentication Server machines that belong to the
indicated cell.

=back

There are several consequences of entering interactive mode:

=over

=item *

The ka> prompt replaces the system (shell) prompt. When typing
commands at this prompt, provide only the operation code (omit the
command suite name, C<kas>).

=item *

The command interpreter does not prompt for the issuer's password.

The issuer's identity and password, the relevant cell, and the set
of Authentication Server machines specified when entering
interactive mode apply to all commands issued during the session.
They cannot be changed without leaving the session, except by
using the C<(kas) noauthentication> command to replace the current
authenticated connections with unauthenticated ones. The
B<-admin_username>, B<-password_for_admin>, B<-cell>, and B<-servers>
arguments are ignored if provided on a command issued during
interactive mode.

=back

To establish an unauthenticated connection to the Authentication
Server, include the B<-noauth> flag or provide an incorrect password.
Unless authorization checking is disabled on each Authentication
Server machine involved, however, it is not possible to perform any
privileged operations within such a session.

To end the current authenticated connection and establish an
unauthenticated one, issue the C<(kas) noauthentication> command. To
leave interactive mode and return to the regular shell prompt, issue
the C<(kas) quit> command.

=head1 OPTIONS

=over 4

=item B<-admin_username> I<admin principal to use for authentication>

Specifies the user identity under which to authenticate with
the Authentication Server for execution of the command. For
more details, see the introductory L<kas(1)> reference page.

=item B<-password_for_admin> I<admin password>

Specifies the password of the command's issuer. If it is
omitted (as recommended), the C<kas> command interpreter prompts
for it and does not echo it visibly. For more details, see the
introductory L<kas(1)> reference page.

=item B<-cell> I<cell name>

Names the cell in which to run the command. For more details,
see the introductory L<kas(1)> reference page.

=item B<-servers> I<explicit list of authentication servers> ...

Names each machine running an Authentication Server with which
to establish a connection. For more details, see the
introductory L<kas(1)> reference page.

=item B<-noauth>

Assigns the unprivileged identity B<anonymous> to the issuer. For
more details, see the introductory L<kas(1)> reference page.

=item B<-help>

Prints the online help for this command. All other valid
options are ignored.

=back

=head1 EXAMPLES

The following example shows a user entering interactive mode as the
privileged user B<admin>.

B<    kas interactive admin>
   Password for admin: admin_password
   ka>

=head1 PRIVILEGE REQUIRED

None

=head1 COPYRIGHT

IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.

Converted from html to pod by Alf Wachsmann <alfw@slac.stanford.edu>, 2003,
and Elizabeth Cassell <e_a_c@mailsnare.net>, 2004,
Stanford Linear Accelerator Center, a department of Stanford University.

=head1 SEE ALSO

L<kas(1)>,
L<kas_noauthentication(1)>,
L<kas_quit(1)>

=cut
