Move FreeIPA service masking from Proxmox to Debian

diff --git a/personal_infra/puppet/modules/proxmox/manifests/freeipa.pp b/personal_infra/puppet/modules/proxmox/manifests/freeipa.pp
index f3464c78f39b9bb66950924e8834485d578e2920..e91c56e3c01a905a7f0f20bf5fe5e2698d4652d2 100644 (file)
--- a/personal_infra/puppet/modules/proxmox/manifests/freeipa.pp
+++ b/personal_infra/puppet/modules/proxmox/manifests/freeipa.pp
@@ -4,14 +4,4 @@ class proxmox::freeipa {
   file {['/etc/subuid', '/etc/subgid']:
     content => epp('proxmox/freeipa_subxid', {'freeipa' => lookup('freeipa')}),
   }
-
-  # TODO
-  service {['sssd-ssh.socket', 'sssd-pam-priv.socket', 'sssd-nss.socket', 'sssd-sudo.socket', 'sssd-pam.socket']:
-    ensure => stopped,
-    enable => mask,
-  }
-  ~>
-  exec {'/usr/bin/systemctl reset-failed':
-    refreshonly => true,
-  }
 }

diff --git a/personal_infra/puppet/site/01-ipa.pp b/personal_infra/puppet/site/01-ipa.pp
index 9adf98a24235d0936c6a4ce1e9cfedce3f0847be..d6db75bd814b76086deaec3c9f04c2375ec86c87 100644 (file)
--- a/personal_infra/puppet/site/01-ipa.pp
+++ b/personal_infra/puppet/site/01-ipa.pp
@@ -15,6 +15,18 @@ if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "1
   }
 }
 
+if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "12" {
+  # TODO
+  service {['sssd-ssh.socket', 'sssd-pam-priv.socket', 'sssd-nss.socket', 'sssd-sudo.socket', 'sssd-pam.socket']:
+    ensure => stopped,
+    enable => mask,
+  }
+  ~>
+  exec {'/usr/bin/systemctl reset-failed':
+    refreshonly => true,
+  }
+}
+
 package {$ipa_client_package:}
 package {'sudo':}