]> xn--ix-yja.es Git - alex.git/commitdiff
More IPA hacks
authoralex <alex@pdp7.net>
Wed, 27 Nov 2024 19:40:32 +0000 (20:40 +0100)
committeralexpdp7 <alex@corcoles.net>
Wed, 27 Nov 2024 19:41:19 +0000 (20:41 +0100)
personal_infra/puppet/site/01-ipa.pp
personal_infra/puppet/site/maelcum.mad.int.pdp7.net.pp

index a913860155c31563036a81e535154429034fe84c..3e76d28ff781e1e1026bd269c39314e252465313 100644 (file)
@@ -16,6 +16,9 @@ if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "1
 }
 
 # https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026008
+#
+# systems which were originally Debian 11 seem to not have this problem,
+# so I'll add hacks to new systems in their manifest :(
 if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "12" {
   Package[$ipa_client_package]
   ->
index 5fd9a3b1b35e25eb4dac0a739f767437848b75e1..25e1732dd236688887a4c9445babf8bd174e789a 100644 (file)
@@ -11,4 +11,11 @@ node 'maelcum.mad.int.pdp7.net' {
     ,
     notify => Service['dnsmasq'],
   }
+
+  service {'sssd-pam.socket':
+    ensure => stopped,
+    enable => mask,
+  }
+  ~>
+  Exec['/usr/bin/systemctl reset-failed']
 }