From 924f18a4b549718219f12eb26b935ff9e0b94c39 Mon Sep 17 00:00:00 2001
From: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl>
Date: Thu, 25 Jul 2024 12:21:07 +0200
Subject: [PATCH] Move sssd service definition to avoid duplication

The ipa_manage_sssd block already existed and now the service lives
together with the config file management.
---
 manifests/config.pp | 14 ++++++--------
 1 file changed, 6 insertions(+), 8 deletions(-)

diff --git a/manifests/config.pp b/manifests/config.pp
index 9c8849ce..bce39518 100644
--- a/manifests/config.pp
+++ b/manifests/config.pp
@@ -191,14 +191,6 @@
         }
       }
 
-      if $foreman::ipa_manage_sssd {
-        service { 'sssd':
-          ensure  => running,
-          enable  => true,
-          require => Package['sssd-dbus'],
-        }
-      }
-
       file { "/etc/pam.d/${foreman::pam_service}":
         ensure  => file,
         owner   => root,
@@ -246,6 +238,12 @@
           changes => $sssd_changes,
           notify  => Service['sssd'],
         }
+
+        service { 'sssd':
+          ensure  => running,
+          enable  => true,
+          require => Package['sssd-dbus'],
+        }
       }
 
       foreman::settings_fragment { 'authorize_login_delegation.yaml':