From eaef85ce2662fb08b3ebb1254845faac0f5f5094 Mon Sep 17 00:00:00 2001
From: alex <alex@pdp7.net>
Date: Sun, 13 Oct 2024 12:47:06 +0200
Subject: Move FreeIPA service masking from Proxmox to Debian

---
 personal_infra/puppet/site/01-ipa.pp | 12 ++++++++++++
 1 file changed, 12 insertions(+)

(limited to 'personal_infra/puppet/site/01-ipa.pp')

diff --git a/personal_infra/puppet/site/01-ipa.pp b/personal_infra/puppet/site/01-ipa.pp
index 9adf98a2..d6db75bd 100644
--- a/personal_infra/puppet/site/01-ipa.pp
+++ b/personal_infra/puppet/site/01-ipa.pp
@@ -15,6 +15,18 @@ if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "1
   }
 }
 
+if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "12" {
+  # TODO
+  service {['sssd-ssh.socket', 'sssd-pam-priv.socket', 'sssd-nss.socket', 'sssd-sudo.socket', 'sssd-pam.socket']:
+    ensure => stopped,
+    enable => mask,
+  }
+  ~>
+  exec {'/usr/bin/systemctl reset-failed':
+    refreshonly => true,
+  }
+}
+
 package {$ipa_client_package:}
 package {'sudo':}
 
-- 
cgit v1.2.3