From 07a97cb83fc06bd547a51d0910f41dda1bd30587 Mon Sep 17 00:00:00 2001
From: Thomas Woerner <twoerner@redhat.com>
Date: Wed, 3 Apr 2019 14:08:45 +0200
Subject: [PATCH] ipaclient: Krb5 should only be configured if
 ipaclient_on_master is not set

Krb5 configuration was also done if ipaclient_on_master was set. This
resulted in a reverted configuration while deploying the client part in
a server deploment.
---
 roles/ipaclient/tasks/install.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/ipaclient/tasks/install.yml b/roles/ipaclient/tasks/install.yml
index 918647f8..87863cb7 100644
--- a/roles/ipaclient/tasks/install.yml
+++ b/roles/ipaclient/tasks/install.yml
@@ -240,6 +240,7 @@
       sssd: "{{ result_ipaclient_test.sssd }}"
       force: "{{ ipaclient_force }}"
       #on_master: "{{ ipaclient_on_master }}"
+    when: not ipaclient_on_master | bool
 
   - name: Install - IPA API calls for remaining enrollment parts
     ipaclient_api:
-- 
GitLab