Fix properly IPA issues

diff --git a/personal_infra/puppet/site/01-ipa.pp b/personal_infra/puppet/site/01-ipa.pp
index 9adf98a24235d0936c6a4ce1e9cfedce3f0847be..a913860155c31563036a81e535154429034fe84c 100644 (file)
--- a/personal_infra/puppet/site/01-ipa.pp
+++ b/personal_infra/puppet/site/01-ipa.pp
@@ -15,6 +15,18 @@ if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "1
   }
 }
 
+# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026008
+if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "12" {
+  Package[$ipa_client_package]
+  ->
+  service {['sssd-ssh.socket', 'sssd-nss.socket', 'sssd-sudo.socket', 'sssd-pam-priv.socket']:
+    ensure => stopped,
+    enable => mask,
+  }
+  ~>
+  Exec['/usr/bin/systemctl reset-failed']
+}
+
 package {$ipa_client_package:}
 package {'sudo':}
 
@@ -24,7 +36,9 @@ if 'lxc' in lookup("group_names") {
     enable => mask,
   }
   ~>
-  exec {'/usr/bin/systemctl reset-failed':
-    refreshonly => true,
-  }
+  Exec['/usr/bin/systemctl reset-failed']
+}
+
+exec {'/usr/bin/systemctl reset-failed':
+  refreshonly => true,
 }