From b70f070dca25838adda66d907b5bddb74c7c9c6e Mon Sep 17 00:00:00 2001 From: "Endi S. Dewata" Date: Tue, 8 Aug 2023 13:17:54 -0500 Subject: [PATCH] Restore default value for pki_share_db In commit e055ae8c8efd4f8c5a142d2f90b502ef3b01f3df the default values for pki_share_db for non-CA subsystems were changed to False since subsystems on separate instances will not share the same database user, but apparently it causes a problem during TPS installation with a shared instance. To avoid changing the behavior, the default values have been restored to True. This param can still be overridden in pkispawn config as needed. Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2228209 --- base/server/etc/default.cfg | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/base/server/etc/default.cfg b/base/server/etc/default.cfg index 25adc3bf75c..12324bf0ea9 100644 --- a/base/server/etc/default.cfg +++ b/base/server/etc/default.cfg @@ -522,7 +522,7 @@ pki_ds_base_dn=o=%(pki_instance_name)s-KRA pki_ds_database=%(pki_instance_name)s-KRA pki_ds_hostname=%(pki_hostname)s pki_subsystem_name=KRA %(pki_hostname)s %(pki_https_port)s -pki_share_db=False +pki_share_db=True pki_share_dbuser_dn=uid=pkidbuser,ou=people,%(pki_ds_base_dn)s ############################################################################### @@ -595,7 +595,7 @@ pki_ds_base_dn=o=%(pki_instance_name)s-OCSP pki_ds_database=%(pki_instance_name)s-OCSP pki_ds_hostname=%(pki_hostname)s pki_subsystem_name=OCSP %(pki_hostname)s %(pki_https_port)s -pki_share_db=False +pki_share_db=True pki_share_dbuser_dn=uid=pkidbuser,ou=people,%(pki_ds_base_dn)s @@ -627,7 +627,7 @@ pki_ds_base_dn=o=%(pki_instance_name)s-TKS pki_ds_database=%(pki_instance_name)s-TKS pki_ds_hostname=%(pki_hostname)s pki_subsystem_name=TKS %(pki_hostname)s %(pki_https_port)s -pki_share_db=False +pki_share_db=True pki_share_dbuser_dn=uid=pkidbuser,ou=people,%(pki_ds_base_dn)s ############################################################################### @@ -657,7 +657,7 @@ pki_kra_uri=https://%(pki_hostname)s:%(pki_https_port)s pki_tks_uri=https://%(pki_hostname)s:%(pki_https_port)s pki_enable_server_side_keygen=False pki_import_shared_secret=False -pki_share_db=False +pki_share_db=True pki_share_dbuser_dn=uid=pkidbuser,ou=people,%(pki_ds_base_dn)s pki_source_phone_home_xml=/usr/share/pki/%(pki_subsystem_type)s/conf/phoneHome.xml