Bug 696175

Summary: Add new pkiremove option to CLI and install docs
Product: Red Hat Certificate System Reporter: Deon Ballard <dlackey>
Component: Doc-cli-tools-guideAssignee: Deon Ballard <dlackey>
Status: CLOSED CURRENTRELEASE QA Contact: ecs-bugs
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 8.1CC: alee, awnuk, cfu, ckannan, jmagne, jskeoch, mharmsen
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-06-04 19:55:22 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 445047    

Description Deon Ballard 2011-04-13 13:33:32 UTC
Bug 694569 adds a new command line argument to pkiremove for the password for the NSS database - specifically the database/token in which the subsystem certificate is stored.  This cert is used to communicate with the security domain to remove the instance's entry and admin user from the security domain CA.  

The command line option is -token_pwd=<token password>.

In the absence of this extra parameter, the script will look for the password in password.conf.  If that file is unavailable, or if the required password is not present in the password.conf, then pkiremove will prompt for the password.  So the order of finding the password is 

command line option, password.conf, prompt
 
This optional command line argument is useful when the password.conf file has been removed.  This needs to be updated in the CLI docs and install guide.

Comment 4 Deon Ballard 2011-05-19 18:14:30 UTC
Changing MODIFIED bugs to ON_QA.