1pki-user-membership(1P)KI User Membership Management Commanpdksi-user-membership(1)
2
3
4
6 pki-user-membership - Command-line interface for managing PKI user mem‐
7 berships.
8
9
11 pki [CLI-options] lt;subsystemgt;-user-membership
12 pki [CLI-options] lt;subsystemgt;-user-membership-find user-ID [com‐
13 mand-options]
14 pki [CLI-options] lt;subsystemgt;-user-membership-add user-ID group-ID
15 [command-options]
16 pki [CLI-options] lt;subsystemgt;-user-membership-del user-ID group-ID
17 [command-options]
18
19
21 The pki lt;subsystemgt;-user-membership commands provide command-line
22 interfaces to manage user memberships on the specified subsystem.
23
24
25 Valid subsystems are ca, kra, ocsp, tks, and tps.
26
27
28 pki [CLI-options] lt;subsystemgt;-user-membership
29 This command is to list available user membership commands for the
30 subsystem.
31
32
33 pki [CLI-options] lt;subsystemgt;-user-membership-find user-ID [com‐
34 mand-options]
35 This command is to list groups in which the subsystem user is a
36 member.
37
38
39 pki [CLI-options] lt;subsystemgt;-user-membership-add user-ID group-ID
40 [command-options]
41 This command is to add the subsystem user into a group.
42
43
44 pki [CLI-options] lt;subsystemgt;-user-membership-del user-ID group-ID
45 [command-options]
46 This command is to delete the subsystem user from a group.
47
48
50 The CLI options are described in pki(1).
51
52
54 To view available user membership commands, type pki lt;subsys‐
55 temgt;-user-membership. To view each command's usage, type pki lt;sub‐
56 systemgt;-user-membership-lt;commandgt; --help.
57
58
59 All user membership commands must be executed as the subsystem adminis‐
60 trator.
61
62
63 For example, to list groups in which a CA user is a member execute the
64 following command:
65
66
67 $ pki <CA admin authentication> ca-user-membership-find testuser
68
69
70
71 The results can be paged by specifying the (0-based) index of the first
72 entry to return and the maximum number of entries returned:
73
74
75 $ pki <CA admin authentication> ca-user-membership-find testuser --start 20 --size 10
76
77
78
79 The above command will return entries #20 to #29.
80
81
82 To add a CA user into a group, specify the user ID and the group ID in
83 the following command:
84
85
86 $ pki <CA admin authentication> ca-user-membership-add testuser Administrators
87
88
89
90 To delete a CA user from a group, specify the user ID and the group ID
91 in the following command:
92
93
94 $ pki <CA admin authentication> ca-user-membership-del testuser Administrators
95
96
97
99 Endi S. Dewata lt;edewata@redhat.comgt;.
100
101
103 Copyright (c) 2015 Red Hat, Inc. This is licensed under the GNU Gen‐
104 eral Public License, version 2 (GPLv2). A copy of this license is
105 available at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
106
107
108
109PKI Aug 24, 2015 pki-user-membership(1)