diff --git a/library/ipanss.py b/library/ipanss.py
index 8b523991c600b664a3ae4b28816d82053b52dff5..3eb3826e8620bfdf30f69ee6c044df0219ef1f1a 100644
--- a/library/ipanss.py
+++ b/library/ipanss.py
@@ -332,7 +332,7 @@ def main():
     # Check that nss is working properly
     if not on_master:
         user = principal
-        if user is None:
+        if user is None or user == "":
             user = "admin@%s" % domain
             module.log("Principal is not set when enrolling with OTP"
                        "; using principal '%s' for 'getent passwd'" % user)