Jumping in here, if someone is organizing a TODO list to get freeipa
on debian, feel free to add "porting/testing puppet-ipa" to this. I'm
the puppet-ipa  guy. I'm happy to work on that part whenever
someone has a working debian freeipa install for me to use. Once it
"works" or at least mostly, feel free to ping me somehow.
Freeipa-users mailing list