diff --git a/roles/ipaclient/vars/Debian-10.yml b/roles/ipaclient/vars/Debian-10.yml
new file mode 100644
index 0000000000000000000000000000000000000000..8de5dc8e2e2ceb389f9b5f9538c2248e0737091f
--- /dev/null
+++ b/roles/ipaclient/vars/Debian-10.yml
@@ -0,0 +1,7 @@
+---
+# vars/Debian.yml
+ipaclient_packages: [ "freeipa-client" ]
+# Debian Buster must use python2 as Python interpreter due
+# to the way freeipa-client package is defined.
+# You must install package python2.7 before executing this role.
+ansible_python_interpreter: '/usr/bin/python2'