Relocating pkidbuser

[pki-bot]

This issue was migrated from Pagure Issue #1009. Originally filed by edewata (@edewata) on 2014-05-20 17:36:28:

• Assigned to nobody

---

The pkidbuser is used by Dogtag (and probably IPA too) to communicate to the LDAP database. Currently the user is created under ou=People under the Dogtag subtree, so it will appear as a Dogtag user in the CLI. However, it's actually not a valid Dogtag user and cannot be used for Dogtag authentication. It would be better to create the user outside ou=People, but still under the subsystem's subtree (e.g. uid=pkidbuser,o=pki-ca). This way the user will not appear as Dogtag user, but will still be replicated.

[pki-bot]

Comment from edewata (@edewata) at 2015-09-15 20:49:47

This is important to fix due to conflicting certificate mapping (ticket 1595).

See also: http://pki.fedoraproject.org/wiki/PKI_Ticket_1009

[pki-bot]

Comment from edewata (@edewata) at 2017-02-27 14:05:09

Metadata Update from @edewata:

• Issue set to the milestone: 10.4

[pki-bot]

Comment from edewata (@edewata) at 2017-04-07 22:43:46

Metadata Update from @edewata:

• Custom field reviewer adjusted to ''
• Custom field version adjusted to ''
• Issue close_status updated to: None
• Issue set to the milestone: FUTURE (was: 10.4)