-
Notifications
You must be signed in to change notification settings - Fork 139
PKI User CLI
Endi S. Dewata edited this page Jun 7, 2021
·
3 revisions
Each PKI subsystem (i.e. CA, KRA, OCSP, TKS, TKS) provides a CLI to manage the system users. All commands must be executed as an administrator of the corresponding subsystem. However, the default the CA admin certificate can be used to authenticate as the administrator of each subsystem.
In general the commands follow the following format:
$ pki <admin authentication> <subsystem>-user-<command>
For example, in the command below the CA admin certificate is used to access TPS users:
$ pki -d ~/.dogtag/pki-tomcat/ca/alias -c Secret.123 -n caadmin tps-user-find
$ pki -d ~/.dogtag/pki-tomcat/ca/alias -c Secret.123 -n caadmin ca-user-find ----------------- 3 entries matched ----------------- User ID: CA-server.example.com-8443 Full name: CA-server.example.com-8443 User ID: caadmin Full name: caadmin User ID: pkidbuser Full name: pkidbuser ---------------------------- Number of entries returned 3 ----------------------------
$ pki -d ~/.dogtag/pki-tomcat/ca/alias -c Secret.123 -n caadmin ca-user-show caadmin -------------- User "caadmin" -------------- User ID: caadmin Full name: caadmin Email: caadmin@example.com Type: adminType State: 1
$ pki -d ~/.dogtag/pki-tomcat/ca/alias -c Secret.123 -n caadmin ca-user-add testuser --fullName "Test User" --------------------- Added user "testuser" --------------------- User ID: testuser Full name: Test User
$ pki -d ~/.dogtag/pki-tomcat/ca/alias -c Secret.123 -n caadmin ca-user-mod testuser --email testuser@example.com ------------------------ Modified user "testuser" ------------------------ User ID: testuser Full name: Test User Email: testuser@example.com
$ pki -d ~/.dogtag/pki-tomcat/ca/alias -c Secret.123 -n caadmin ca-user-del testuser ----------------------- Deleted user "testuser" -----------------------
|
Tip
|
To find a page in the Wiki, enter the keywords in search field, press Enter, then click Wikis. |