Skip to content

PKI Security Domain Session CLI

Endi S. Dewata edited this page Nov 12, 2021 · 3 revisions

Overview (Not Implemented)

PKI provides CLI to manage security domain sessions. All commands need to be executed as administrator.

Listing Sessions

To list all sessions:

$ pki -u caadmin -w Secret.123 securitydomain-session-find
-----------------
2 entries matched
-----------------
  Session ID: 3975458348241345670
  Host: 127.0.0.1
  User: caadmin
  Subsystem: CA
  Create Timestamp: 2015-10-06 06:12:32

  Session ID: 2831833886976797444
  Host: 127.0.0.1
  User: caadmin
  Subsystem: KRA
  Create Timestamp: 2015-10-06 06:12:39
----------------------------
Number of entries returned 2
----------------------------

To list sessions on certain host:

$ pki -u caadmin -w Secret.123 securitydomain-session-find --host <host>

To list sessions created by certain user:

$ pki -u caadmin -w Secret.123 securitydomain-session-find --user <user>

To list sessions for certain subsystem:

$ pki -u caadmin -w Secret.123 securitydomain-session-find --subsystem <subsystem>

To list sessions within certain time range:

$ pki -u caadmin -w Secret.123 securitydomain-session-find --created-after <time> --created-before <time>

Displaying Session Details

$ pki -u caadmin -w Secret.123 securitydomain-session-show 2831833886976797444
  Session ID: 2831833886976797444
  Host: 127.0.0.1
  User: caadmin
  Subsystem: KRA
  Create Timestamp: 2015-10-06 06:12:39

Creating a Session

$ pki -u caadmin -w Secret.123 securitydomain-session-add --host $HOSTNAME --subsystem TKS
-------------------------------------
Created session "6164029697285997150"
-------------------------------------
  Session ID: 6164029697285997150
  Host: 127.0.0.1
  User: caadmin
  Subsystem: TKS
  Create Timestamp: 2015-10-06 19:42:34

Deleting a Session

$ pki -u caadmin -w Secret.123 securitydomain-session-del 6164029697285997150
-------------------------------------
Removed session "6164029697285997150"
-------------------------------------
Clone this wiki locally