ad-auth/sssd: Disable sssd-pac on Debian ≥bookworm

ad-auth/tasks/sssd.yml

@@ -115,3 +115,17 @@
     group: root
   tags:
     - sssd
+
+# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1037930
+# https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org/thread/HQKQOX53YJ2DUNPYPQ4LC7R56UXO2R3Z/#27FR2CRABDFJIVXRFZUXF5GHDKF7PGT7
+# https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org/message/IUE3FRAV7OPFHELKWDZRPVZ2XMHBQM4R/
+- name: Disable sssd-pac service
+  systemd:
+    name: sssd-pac.socket
+    state: stopped
+    enabled: false
+  when:
+    - ansible_distribution == "Debian"
+    - ansible_distribution_major_version | int >= 12
+  tags:
+    - sssd