Hello,
I am newbie in Openxpki. I just installed v3.12 and testing it.
As this is mainly for my personal usage I got a bit tired of continuously
login/logout between CA Operator and RA Operator, so I thought that adding the
two roles to the user in handler.yaml would work:
TestAccounts:
type: Password
user:
caop:
digest: "{ssha}..."
role: RA Operator,CA Operator
And yes, it works for the menus, but doesn't work at all for the operations. Webui show
errors like "Unable to load workflow information", and openxpki logs show
errors too:
catchall[539787]: 2021/08/19 10:10:54 openxpki.auth.INFO Login successful
(user: caop, role: RA Operator,CA Operator) [pid=539787|sid=luLD]
catchall[539787]: 2021/08/19 10:10:59 openxpki.system.ERROR
I18N_OPENXPKI_UI_WORKFLOW_CREATE_NOT_ALLOWED; __REALM__ => democa, __ROLE__ => RA
Operator,CA Operator, __WF_TYPE__ => certificate_signing_request_v2
[pid=539787|sid=luLD]
catchall[539787]: 2021/08/19 10:10:59 openxpki.system.WARN
I18N_OPENXPKI_UI_WORKFLOW_CREATE_NOT_ALLOWED; __REALM__ => democa, __ROLE__ => RA
Operator,CA Operator, __WF_TYPE__ => certificate_signing_request_v2
[pid=539787|sid=luLD]
catchall[539787]: 2021/08/19 10:10:59 openxpki.system.ERROR User is not authorized
to fetch workflow info; __type__ => certificate_signing_request_v2
[pid=539787|sid=luLD]
So, I suppose multiple roles for 1 user is not the way to go.
How can I create 1 user with access to RA and CA interfaces and functionality?
Regards,
Carlos Velasco
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users