From: alex <alex@pdp7.net>
Date: Sun, 10 Nov 2024 11:21:27 +0000 (+0100)
Subject: Fix properly IPA issues
X-Git-Url: https://xn--ix-yja.es/gitweb/?a=commitdiff_plain;h=da1dd1e65e3091be78f6dda765302ee440cbdc23;p=alex.git

Fix properly IPA issues
---

diff --git a/personal_infra/puppet/site/01-ipa.pp b/personal_infra/puppet/site/01-ipa.pp
index 9adf98a..a913860 100644
--- a/personal_infra/puppet/site/01-ipa.pp
+++ b/personal_infra/puppet/site/01-ipa.pp
@@ -15,6 +15,18 @@ if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "1
   }
 }
 
+# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026008
+if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "12" {
+  Package[$ipa_client_package]
+  ->
+  service {['sssd-ssh.socket', 'sssd-nss.socket', 'sssd-sudo.socket', 'sssd-pam-priv.socket']:
+    ensure => stopped,
+    enable => mask,
+  }
+  ~>
+  Exec['/usr/bin/systemctl reset-failed']
+}
+
 package {$ipa_client_package:}
 package {'sudo':}
 
@@ -24,7 +36,9 @@ if 'lxc' in lookup("group_names") {
     enable => mask,
   }
   ~>
-  exec {'/usr/bin/systemctl reset-failed':
-    refreshonly => true,
-  }
+  Exec['/usr/bin/systemctl reset-failed']
+}
+
+exec {'/usr/bin/systemctl reset-failed':
+  refreshonly => true,
 }