From da1dd1e65e3091be78f6dda765302ee440cbdc23 Mon Sep 17 00:00:00 2001
From: alex <alex@pdp7.net>
Date: Sun, 10 Nov 2024 12:21:27 +0100
Subject: [PATCH] Fix properly IPA issues

---
 personal_infra/puppet/site/01-ipa.pp | 20 +++++++++++++++++---
 1 file changed, 17 insertions(+), 3 deletions(-)

diff --git a/personal_infra/puppet/site/01-ipa.pp b/personal_infra/puppet/site/01-ipa.pp
index 9adf98a..a913860 100644
--- a/personal_infra/puppet/site/01-ipa.pp
+++ b/personal_infra/puppet/site/01-ipa.pp
@@ -15,6 +15,18 @@ if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "1
   }
 }
 
+# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026008
+if $facts['os']['family'] == 'Debian' and $facts['os']['release']['major'] == "12" {
+  Package[$ipa_client_package]
+  ->
+  service {['sssd-ssh.socket', 'sssd-nss.socket', 'sssd-sudo.socket', 'sssd-pam-priv.socket']:
+    ensure => stopped,
+    enable => mask,
+  }
+  ~>
+  Exec['/usr/bin/systemctl reset-failed']
+}
+
 package {$ipa_client_package:}
 package {'sudo':}
 
@@ -24,7 +36,9 @@ if 'lxc' in lookup("group_names") {
     enable => mask,
   }
   ~>
-  exec {'/usr/bin/systemctl reset-failed':
-    refreshonly => true,
-  }
+  Exec['/usr/bin/systemctl reset-failed']
+}
+
+exec {'/usr/bin/systemctl reset-failed':
+  refreshonly => true,
 }
-- 
2.47.3