feat(idp): ipa and krb5 hosts

packages/default.nix

@@ -32,6 +32,9 @@
       jq
       ;
     inherit (inputs.deploy-rs.packages.${system}) deploy-rs;
+
+    inherit (pkgs) freeipa-ipasam samba-ldap samba-ipa;
+
     nf-deploy = pkgs.writeShellScriptBin "nf-deploy" ''
       ${exports}
       ${exportsSsh}
@@ -56,6 +59,7 @@
         INPUT_INFRA_PVE = reisen + "/bin/pve.sh";
         INPUT_INFRA_MKPAM = reisen + "/bin/mkpam.sh";
         INPUT_INFRA_CT_CONFIG = reisen + "/bin/ct-config.sh";
+        INPUT_AUTHRPCGSS_OVERRIDES = reisen + "/net.auth-rpcgss-module.service.overrides";
       };
       inputVars = set.mapToValues (key: path: ''${key}="$(base64 -w0 < ${path})"'') inputAttrs;
     in

packages/freeipa-ipasam.patch

@@ -0,0 +1,28 @@
+diff --git a/Makefile.am b/Makefile.am
+--- a/Makefile.am
++++ b/Makefile.am
+@@ -3,8 +3,7 @@ NULL =
+ ACLOCAL_AMFLAGS = -I m4
+ 
+ if ENABLE_SERVER
+-    IPASERVER_SUBDIRS = ipaserver ipasphinx
+-    SERVER_SUBDIRS = daemons init install
++    SERVER_SUBDIRS = daemons
+ endif
+ 
+ if WITH_IPATESTS
+diff --git a/daemons/Makefile.am b/daemons/Makefile.am
+--- a/daemons/Makefile.am
++++ b/daemons/Makefile.am
+@@ -9,11 +9,7 @@ noinst_HEADERS = ipa-version.h.in
+ 
+ SUBDIRS =			\
+ 	.			\
+-	dnssec			\
+-	ipa-kdb			\
+-	ipa-slapi-plugins	\
+ 	ipa-sam			\
+-	ipa-otpd		\
+ 	$(NULL)
+ 
+ ipa-version.h: ipa-version.h.in $(top_builddir)/$(CONFIG_STATUS)