Skip to content

Commit

Permalink
Bug2228209-pkidbuser-wrong-o-in-pkispawn
Browse files Browse the repository at this point in the history
Ths patch addresses the issue where by default non-CA instances are
created with hardcoded ending "-CA":
pki_share_dbuser_dn=uid=pkidbuser,ou=people,o=%(pki_instance_name)s-CA
and
pki_ds_base_dn=o=%(pki_instance_name)s-<subsystem type>

where subsystem type is TKS, OCSP, TKS, or KRA,
which effictive makes the 'o' component of pki_share_dbuser_dn
not matching with that of the pki_ds_base_dn.

fixes https://bugzilla.redhat.com/show_bug.cgi?id=2228209
  • Loading branch information
ladycfu committed Aug 1, 2023
1 parent 2b8c802 commit e055ae8
Showing 1 changed file with 8 additions and 8 deletions.
16 changes: 8 additions & 8 deletions base/server/etc/default.cfg
Original file line number Diff line number Diff line change
Expand Up @@ -522,8 +522,8 @@ pki_ds_base_dn=o=%(pki_instance_name)s-KRA
pki_ds_database=%(pki_instance_name)s-KRA
pki_ds_hostname=%(pki_hostname)s
pki_subsystem_name=KRA %(pki_hostname)s %(pki_https_port)s
pki_share_db=True
pki_share_dbuser_dn=uid=pkidbuser,ou=people,o=%(pki_instance_name)s-CA
pki_share_db=False
pki_share_dbuser_dn=uid=pkidbuser,ou=people,%(pki_ds_base_dn)s

###############################################################################
## OCSP Configuration: ##
Expand Down Expand Up @@ -595,8 +595,8 @@ pki_ds_base_dn=o=%(pki_instance_name)s-OCSP
pki_ds_database=%(pki_instance_name)s-OCSP
pki_ds_hostname=%(pki_hostname)s
pki_subsystem_name=OCSP %(pki_hostname)s %(pki_https_port)s
pki_share_db=True
pki_share_dbuser_dn=uid=pkidbuser,ou=people,o=%(pki_instance_name)s-CA
pki_share_db=False
pki_share_dbuser_dn=uid=pkidbuser,ou=people,%(pki_ds_base_dn)s


###############################################################################
Expand Down Expand Up @@ -627,8 +627,8 @@ pki_ds_base_dn=o=%(pki_instance_name)s-TKS
pki_ds_database=%(pki_instance_name)s-TKS
pki_ds_hostname=%(pki_hostname)s
pki_subsystem_name=TKS %(pki_hostname)s %(pki_https_port)s
pki_share_db=True
pki_share_dbuser_dn=uid=pkidbuser,ou=people,o=%(pki_instance_name)s-CA
pki_share_db=False
pki_share_dbuser_dn=uid=pkidbuser,ou=people,%(pki_ds_base_dn)s

###############################################################################
## TPS Configuration: ##
Expand Down Expand Up @@ -657,8 +657,8 @@ pki_kra_uri=https://%(pki_hostname)s:%(pki_https_port)s
pki_tks_uri=https://%(pki_hostname)s:%(pki_https_port)s
pki_enable_server_side_keygen=False
pki_import_shared_secret=False
pki_share_db=True
pki_share_dbuser_dn=uid=pkidbuser,ou=people,o=%(pki_instance_name)s-CA
pki_share_db=False
pki_share_dbuser_dn=uid=pkidbuser,ou=people,%(pki_ds_base_dn)s
pki_source_phone_home_xml=/usr/share/pki/%(pki_subsystem_type)s/conf/phoneHome.xml

# Paths
Expand Down

0 comments on commit e055ae8

Please sign in to comment.