The pki client-cert-request CLI has been modified to support directory-authenticated profiles by sending the username and password as XML/JSON request attributes. The CertRequetService will then put the credentials into an AuthCredentials object. The ProfileSubmitServlet has also been modified to create an AuthCredentials object from the HTTP request object. The certificate processor classes have been modified to accept an AuthCredentials object instead of retrieving it from HTTP request object. https://fedorahosted.org/pki/ticket/1463 -- Endi S. Dewata