From 7e826fce141cf224a0ea7a5da84054d206c8e575 Mon Sep 17 00:00:00 2001
From: Rafael Guterres Jeffman <rjeffman@redhat.com>
Date: Thu, 20 May 2021 21:02:18 -0300
Subject: [PATCH] ipaservice: Avoid clearing auth-ind when it is empty.

When `auth-ind` was empty, and it was set to be cleared, it might have
triggered an uncessary change. This change add a test so that `auth-ind`
is set only if needed.
---
 plugins/modules/ipaservice.py | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/plugins/modules/ipaservice.py b/plugins/modules/ipaservice.py
index 32ffb839..85282222 100644
--- a/plugins/modules/ipaservice.py
+++ b/plugins/modules/ipaservice.py
@@ -561,6 +561,15 @@ def main():
                             if remove in args:
                                 del args[remove]
 
+                        if (
+                            "krbprincipalauthind" in args
+                            and (
+                                args.get("krbprincipalauthind", [""]) ==
+                                res_find.get("krbprincipalauthind", [""])
+                            )
+                          ):
+                            del args["krbprincipalauthind"]
+
                         if not compare_args_ipa(ansible_module, args,
                                                 res_find):
                             commands.append([name, "service_mod", args])
-- 
GitLab