Add required package for kerberos auth on jammy

[chrisongthb]

This solves #2402

[CLAassistant]

All committers have signed the CLA.

[puppet-community-rangefinder]

apache::params is a class

Breaking changes to this file WILL impact these 7 modules (exact match):

• openstack-keystone
• osc-openondemand
• xdrum-puppet
• brucem-ezpublish
• desalvo-bacula
• jlondon-phpmyadmin
• openstack-panko

Breaking changes to this file MAY impact these 4 modules (near match):

• camptocamp-catalog_diff
• puppet-catalog_diff
• willdurand-bazinga
• openstack-tripleo

This module is declared in 176 of 580 indexed public Puppetfiles.

---

These results were generated with Rangefinder, a tool that helps predict the downstream impact of breaking changes to elements used in Puppet modules. You can run this on the command line to get a full report.

Exact matches are those that we can positively identify via namespace and the declaring modules' metadata. Non-namespaced items, such as Puppet 3.x functions, will always be reported as near matches only.

[ekohl]

I've verified https://packages.ubuntu.com/jammy/libapache2-mod-auth-kerb exists, but packages.debian.org appears to be down now so I can't check it.

[chrisongthb]

Looks like libapache2-mod-auth-kerb is not available for Debian 11 bullseye:
https://packages.debian.org/search?suite=all&searchon=names&keywords=libapache2-mod-auth-kerb

Updated params.pp - please have a look - Thx!

[ekohl]

Looking at the diff, the you now define nss again, which previously wasn't. That package was dropped in Ubuntu 20.04.

I'm starting to wonder if it should be changed to this pattern:

$_base_mod_packages = {
  # common ones
}

$_version_mod_packages = if VERSION_CHECK {
  {
    # ...
  }
} else {
  {}
}

$mod_packages = $_base_mod_packages + $_os_mod_packages

[chrisongthb]

Good idea to split it up as it is better readable. Could you look at the implementation?

[ekohl]

This is indeed what I had in mind, and moving forward it'll hopefully be easier to maintain. I'll kick off CI so see if it agrees :)

[chrisongthb]

@ekohl if I got you right, it might work now.

[chrisongthb]

@ekohl could you check failed CI for SLES? I did not change anything regarding SLES.

[ekohl]

I think it's unrelated, but I don't know SLES. This needs approval from @puppetlabs/modules before it can be merged, so I'm now counting on them to take over.

[LukasAud]

Hi @chrisongthb, sorry for the long delay in engagement. We have been busy with essential maintenance. Could you rebase your PR to make sure its up-to-date with our current main. CI seems to be outdated as its not showing our Puppet 8 agent tests.

We will be happy to take a closer look into this PR once that is done.

[chrisongthb]

@LukasAud - rebase done :)

[Ramesh7]

Thanks @chrisongthb your contribution, The changes looks good. I am taking this forward.