Skip to content

Commit

Permalink
Restore default value for pki_share_db
Browse files Browse the repository at this point in the history
In commit 563451b the default
values for pki_share_db for non-CA subsystems were changed to
False since subsystems on separate instances will not share the
same database user, but apparently it causes a problem during
TPS installation with a shared instance.

To avoid changing the behavior, the default values have been
restored to True. This param can still be overridden in
pkispawn config as needed.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2228209
  • Loading branch information
edewata committed Aug 8, 2023
1 parent 563451b commit ac0831f
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions base/server/etc/default.cfg
Original file line number Diff line number Diff line change
Expand Up @@ -525,7 +525,7 @@ pki_ds_base_dn=o=%(pki_instance_name)s-KRA
pki_ds_database=%(pki_instance_name)s-KRA
pki_ds_hostname=%(pki_hostname)s
pki_subsystem_name=KRA %(pki_hostname)s %(pki_https_port)s
pki_share_db=False
pki_share_db=True
pki_share_dbuser_dn=uid=pkidbuser,ou=people,%(pki_ds_base_dn)s

# Key ID generator: legacy, random
Expand Down Expand Up @@ -610,7 +610,7 @@ pki_ds_base_dn=o=%(pki_instance_name)s-OCSP
pki_ds_database=%(pki_instance_name)s-OCSP
pki_ds_hostname=%(pki_hostname)s
pki_subsystem_name=OCSP %(pki_hostname)s %(pki_https_port)s
pki_share_db=False
pki_share_db=True
pki_share_dbuser_dn=uid=pkidbuser,ou=people,%(pki_ds_base_dn)s


Expand Down Expand Up @@ -642,7 +642,7 @@ pki_ds_base_dn=o=%(pki_instance_name)s-TKS
pki_ds_database=%(pki_instance_name)s-TKS
pki_ds_hostname=%(pki_hostname)s
pki_subsystem_name=TKS %(pki_hostname)s %(pki_https_port)s
pki_share_db=False
pki_share_db=True
pki_share_dbuser_dn=uid=pkidbuser,ou=people,%(pki_ds_base_dn)s

###############################################################################
Expand Down Expand Up @@ -672,6 +672,6 @@ pki_kra_uri=https://%(pki_hostname)s:%(pki_https_port)s
pki_tks_uri=https://%(pki_hostname)s:%(pki_https_port)s
pki_enable_server_side_keygen=False
pki_import_shared_secret=False
pki_share_db=False
pki_share_db=True
pki_share_dbuser_dn=uid=pkidbuser,ou=people,%(pki_ds_base_dn)s
pki_source_phone_home_xml=/usr/share/pki/%(pki_subsystem_type)s/conf/phoneHome.xml

0 comments on commit ac0831f

Please sign in to comment.