From c3111a89f0628cf0c4b72070107395c199a5d51c Mon Sep 17 00:00:00 2001
From: Thomas Schneider <thomas@fsmpi.rwth-aachen.de>
Date: Fri, 28 Mar 2025 17:37:41 +0100
Subject: [PATCH] =?UTF-8?q?ad-auth/sssd:=20Disable=20sssd-pac=20on=20Debia?=
 =?UTF-8?q?n=20=E2=89=A5bookworm?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ad-auth/tasks/sssd.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/ad-auth/tasks/sssd.yml b/ad-auth/tasks/sssd.yml
index 22f9807..0651881 100644
--- a/ad-auth/tasks/sssd.yml
+++ b/ad-auth/tasks/sssd.yml
@@ -115,3 +115,17 @@
     group: root
   tags:
     - sssd
+
+# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1037930
+# https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org/thread/HQKQOX53YJ2DUNPYPQ4LC7R56UXO2R3Z/#27FR2CRABDFJIVXRFZUXF5GHDKF7PGT7
+# https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org/message/IUE3FRAV7OPFHELKWDZRPVZ2XMHBQM4R/
+- name: Disable sssd-pac service
+  systemd:
+    name: sssd-pac.socket
+    state: stopped
+    enabled: false
+  when:
+    - ansible_distribution == "Debian"
+    - ansible_distribution_major_version | int >= 12
+  tags:
+    - sssd
-- 
GitLab