More IPA hacks

diff --git a/personal_infra/puppet/site/01-ipa.pp b/personal_infra/puppet/site/01-ipa.pp
index a913860155c31563036a81e535154429034fe84c..3e76d28ff781e1e1026bd269c39314e252465313 100644 (file)
--- a/personal_infra/puppet/site/01-ipa.pp
+++ b/personal_infra/puppet/site/01-ipa.pp
@@ -16,6 +16,9 @@ if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "1
 }
 
 # https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026008
+#
+# systems which were originally Debian 11 seem to not have this problem,
+# so I'll add hacks to new systems in their manifest :(
 if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "12" {
   Package[$ipa_client_package]
   ->

diff --git a/personal_infra/puppet/site/maelcum.mad.int.pdp7.net.pp b/personal_infra/puppet/site/maelcum.mad.int.pdp7.net.pp
index 5fd9a3b1b35e25eb4dac0a739f767437848b75e1..25e1732dd236688887a4c9445babf8bd174e789a 100644 (file)
--- a/personal_infra/puppet/site/maelcum.mad.int.pdp7.net.pp
+++ b/personal_infra/puppet/site/maelcum.mad.int.pdp7.net.pp
@@ -11,4 +11,11 @@ node 'maelcum.mad.int.pdp7.net' {
     ,
     notify => Service['dnsmasq'],
   }
+
+  service {'sssd-pam.socket':
+    ensure => stopped,
+    enable => mask,
+  }
+  ~>
+  Exec['/usr/bin/systemctl reset-failed']
 }