From 7233944e741b2659889429c2a768ef227f4a3a2d Mon Sep 17 00:00:00 2001
From: Endi S. Dewata <edewata@redhat.com>
Date: Aug 11 2023 07:57:31 +0000
Subject: Add pki_share_dbuser_dn for CA


In the future the default value for pki_share_dbuser_dn might
change. To ensure that CA and KRA in IPA will use the same
database user, the pki_share_dbuser_dn needs to be defined
for CA to match the same param for KRA.

Signed-off-by: Endi Sukma Dewata <edewata@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

---

diff --git a/install/share/ipaca_default.ini b/install/share/ipaca_default.ini
index 34349da..058796e 100644
--- a/install/share/ipaca_default.ini
+++ b/install/share/ipaca_default.ini
@@ -130,6 +130,7 @@ pki_audit_signing_nickname=auditSigningCert cert-pki-ca
 pki_audit_signing_subject_dn=cn=CA Audit,%(ipa_subject_base)s
 
 pki_share_db=False
+pki_share_dbuser_dn=uid=pkidbuser,ou=people,o=ipaca
 pki_master_crl_enable=True
 
 pki_default_ocsp_uri=%(ipa_ocsp_uri)s