PKI Server Database CLI

Overview

PKI provides tools to upgrade the internal LDAP database.

Displaying Database Status (Not Implemented Yet)

$ pki-server db-status
  Hostname: server.example.com
  Port: 636
  SSL: yes
  Client Certificate: subsystemCert pki-tomcat

Database Upgrade

The pki-server db-upgrade is a tool to upgrade PKI server LDAP database. Currently the upgrade includes:

• Ticket #2226: adding issuerName attribute

See db.py for details.

This tool is used as part of Database Upgrade for PKI 10.2.x. To run the database upgrade:

$ pki-server db-upgrade
----------------
Upgrade complete
----------------

Schema Upgrade

The pki-server db-schema-upgrade is a tool to upgrade PKI server LDAP schema. Currently the upgrade includes:

• re-applying /usr/share/pki/server/conf/schema.ldif

See db.py for details.

$ pki-server db-schema-upgrade -D "cn=Directory Manager" -w Secret.123
----------------
Upgrade complete
----------------

See also the following tickets:

• Ticket #2439: Add / revise vlv indexes for KRA due to realm changes

• Ticket #2440: Add db migration scripts for schema, vlv and index changes

Reference

• PKI Server CLI

• Database Upgrade