dogtagpki

#1061 man pki group should have information about group-find [filter]
Closed: Invalid Opened by rpattath.

Closed: Invalid
Reopen Issue

Filter also has a restriction of at least 3 characters

root@sigma dogtag]# pki -d /opt/rhqa_pki/certs_db -n CA_adminV -c redhat123 group-find

14 entries matched

Group ID: Certificate Manager Agents
Description: Agents for Certificate Manager

Group ID: Registration Manager Agents
Description: Agents for Registration Manager

Group ID: Subsystem Group
Description: Subsystem Group

Group ID: Trusted Managers
Description: Managers trusted by this PKI instance

Group ID: Administrators
Description: Test ca agent Modified

Group ID: Auditors
Description: People who can read the signed audits

Group ID: ClonedSubsystems
Description: People who can clone the master subsystem

Group ID: Security Domain Administrators
Description: People who are the Security Domain administrators

Group ID: Enterprise CA Administrators
Description: People who are the administrators for the security domain for CA

Group ID: Enterprise KRA Administrators
Description: People who are the administrators for the security domain for KRA

Group ID: Enterprise OCSP Administrators
Description: People who are the administrators for the security domain for OCSP

Group ID: Enterprise TKS Administrators
Description: People who are the administrators for the security domain for TKS

Group ID: Enterprise RA Administrators
Description: People who are the administrators for the security domain for RA

Group ID: Enterprise TPS Administrators
Description: People who are the administrators for the security domain for TPS

Number of entries returned 14

[root@sigma dogtag]# pki -d /opt/rhqa_pki/certs_db -n CA_adminV -c redhat123 group-find KRA

1 entries matched

Group ID: Enterprise KRA Administrators
Description: People who are the administrators for the security domain for KRA

Number of entries returned 1

[root@sigma dogtag]# pki -d /opt/rhqa_pki/certs_db -n CA_adminV -c redhat123 group-find CA
BadRequestException: Filter is too short.

This is by design, and the error message clearly points out the problem. Substring indexes of tokens less than 3 characters are not maintained in 389 DS by default, and it's very costly to do so. This is why we enforce this limitation.

Metadata Update from @rpattath:
- Issue set to the milestone: N/A

Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new
issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.

This issue has been cloned to GitHub and is available here:
https://github.com/dogtagpki/pki/issues/1626

If you want to receive further updates on the issue, please navigate to the
GitHub issue and click on Subscribe button.

Thank you for understanding, and we apologize for any inconvenience.
Metadata
None
None
None
None
Normal
defect
Auth
Community
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.