Overview

This page describes the process to set up a user to access the KRA database in DS with PKI tools.

Adding Database User

$ pki-server kra-user-add \
    --full-name pkidbuser \
    --type agentType \
    pkidbuser

In PKI 11.6 or later the user certificate can be specified with the --cert <path> option.

$ pki-server kra-user-cert-add \
    --cert /var/lib/pki/pki-tomcat/conf/certs/subsystem.crt \
    pkidbuser

$ pki-server kra-db-access-grant \
    uid=pkidbuser,ou=people,dc=kra,dc=pki,dc=example,dc=com