PKI Server Subsystem User CLI

Overview

The pki-server <subsystem>-user commands provide a way to manage the users in the database even when the PKI server is offline. These commands can only be executed by the system administrator.

Listing Subsystem Users

To list the users in the subsystem:

$ pki-server <subsystem>-user-find
  User ID: CA-localhost.localdomain-8443
  Full Name: CA-localhost.localdomain-8443
  Type: agentType
  State: 1

  User ID: caadmin
  Full Name: caadmin
  Email: [email protected]
  Type: adminType
  State: 1

  User ID: pkidbuser
  Full Name: pkidbuser
  Type: agentType
  State: 1

Displaying Subsystem User Info

To display the subsystem user info:

$ pki-server <subsystem>-user-show pkidbuser
  User ID: pkidbuser
  Full Name: pkidbuser
  Type: agentType
  State: 1

Adding Subsystem User

To add a subsystem user, specify the user ID, the full name, and the type:

$ pki-server <subsystem>-user-add testuser --full-name "Test User" --type adminType

Modifying Subsystem User

To modify a subsystem user, specify the user ID and the attributes to change:

$ pki-server <subsystem>-user-mod testuser --add-see-also uid=testuser

Removing Subsystem User

To remove a subsystem user, specify the user ID:

$ pki-server <subsystem>-user-del testuser

Availability: Since PKI 11.1

Adding Subsystem User Certificate

To add a subsystem user certificate, specify the user ID and the certificate file:

$ pki-server <subsystem>-user-cert-add testuser --cert testuser.crt