From: alex <alex@pdp7.net>
Date: Wed, 27 Nov 2024 19:40:32 +0000 (+0100)
Subject: More IPA hacks
X-Git-Url: https://xn--ix-yja.es/gitweb/?a=commitdiff_plain;h=c3f3e7cbef2bd849707eb363986b277ae5017e4d;p=alex.git

More IPA hacks
---

diff --git a/personal_infra/puppet/site/01-ipa.pp b/personal_infra/puppet/site/01-ipa.pp
index a913860..3e76d28 100644
--- a/personal_infra/puppet/site/01-ipa.pp
+++ b/personal_infra/puppet/site/01-ipa.pp
@@ -16,6 +16,9 @@ if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "1
 }
 
 # https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026008
+#
+# systems which were originally Debian 11 seem to not have this problem,
+# so I'll add hacks to new systems in their manifest :(
 if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "12" {
   Package[$ipa_client_package]
   ->
diff --git a/personal_infra/puppet/site/maelcum.mad.int.pdp7.net.pp b/personal_infra/puppet/site/maelcum.mad.int.pdp7.net.pp
index 5fd9a3b..25e1732 100644
--- a/personal_infra/puppet/site/maelcum.mad.int.pdp7.net.pp
+++ b/personal_infra/puppet/site/maelcum.mad.int.pdp7.net.pp
@@ -11,4 +11,11 @@ node 'maelcum.mad.int.pdp7.net' {
     ,
     notify => Service['dnsmasq'],
   }
+
+  service {'sssd-pam.socket':
+    ensure => stopped,
+    enable => mask,
+  }
+  ~>
+  Exec['/usr/bin/systemctl reset-failed']
 }