What were you trying to do that didn't work?

I want to increase the pki systemd startup timeout during IPA installation. Even though 'startup_timeout = 300' is set in /etc/ipa/installer.conf, the option is ignored during IdM server installation.

What is the impact of this issue to you?

IdM installer is timing out while PKI is still starting up.

Please provide the package NVR for which the bug is seen:

ipa-server-4.12.2-1.el9_5.4.x86_64

How reproducible is this bug?:

Always during server and replica installation.

Steps to reproduce

1. # cat /etc/ipa/installer.conf
   [global]
   startup_timeout = 300
2. ipa-server-install [...]
3. # grep -c 'Set start up timeout of pki-tomcatd service to' /var/log/ipaserver-install.log
   0
4. # cat /etc/systemd/system/pki-tomcatd@pki-tomcat.service.d/ipa.conf
   [Service]
   Environment=LC_ALL=C.UTF-8
   ExecStartPost=/usr/libexec/ipa/ipa-pki-wait-running

Expected results

The expectation is, that the custom timeout defined in /etc/ipa/installer.conf is used in the systemd drop-in file for the PKI service.

https://github.com/freeipa/freeipa/blob/ea374e83460a35cfca1caed7357fe1b70ffd7fab/ipaserver/install/cainstance.py/#L725q

Actual results

Custom 'startup_timeout' not written into  the systemd drop-in file for the PKI service.