From 91f677f73cbde27b482ce2b4c90896d1a4200ef6 Mon Sep 17 00:00:00 2001
From: alex <alex@pdp7.net>
Date: Sun, 27 Jul 2025 21:37:16 +0200
Subject: [PATCH] Fix properly IPA socket issues

---
 personal_infra/puppet/site/01-ipa.pp                   | 9 +++------
 personal_infra/puppet/site/maelcum.mad.int.pdp7.net.pp | 7 -------
 2 files changed, 3 insertions(+), 13 deletions(-)

diff --git a/personal_infra/puppet/site/01-ipa.pp b/personal_infra/puppet/site/01-ipa.pp
index 2f4aab4..166345e 100644
--- a/personal_infra/puppet/site/01-ipa.pp
+++ b/personal_infra/puppet/site/01-ipa.pp
@@ -4,12 +4,9 @@ $ipa_client_package = case $facts['os']['family'] {
   default: { fail($facts['os']['family']) }
 }
 
-if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "11" {
-  class {'debian::backports':}
-  ->
-  Package[$ipa_client_package]
-
-  service {['sssd-pac.service', 'sssd-pac.socket']:
+if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "12" {
+  # https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026008
+  service {['sssd-ssh.socket', 'sssd-pam-priv.socket', 'sssd-nss.socket', 'sssd-pam.socket', 'sssd-sudo.socket', 'sssd-pac.socket']:
     ensure => stopped,
     enable => mask,
   }
diff --git a/personal_infra/puppet/site/maelcum.mad.int.pdp7.net.pp b/personal_infra/puppet/site/maelcum.mad.int.pdp7.net.pp
index b3b8a5f..ec1b630 100644
--- a/personal_infra/puppet/site/maelcum.mad.int.pdp7.net.pp
+++ b/personal_infra/puppet/site/maelcum.mad.int.pdp7.net.pp
@@ -14,11 +14,4 @@ node 'maelcum.mad.int.pdp7.net' {
     ,
     notify => Service['dnsmasq'],
   }
-
-  service {'sssd-pam.socket':
-    ensure => stopped,
-    enable => mask,
-  }
-  ~>
-  Exec['/usr/bin/systemctl reset-failed']
 }
-- 
2.47.3