From 00e8e4eb253963527c86f8a06d267b6e21e7c02c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Aur=C3=A9lien=20Bompard?= <aurelien@bompard.org>
Date: Thu, 11 Feb 2021 12:34:04 +0100
Subject: [PATCH] Don't get a keytab on IPA itself
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
---
 roles/base/tasks/main.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index f78beec184..a6561aea81 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -546,6 +546,7 @@
 
 - name: Setup host keytab
   import_tasks: keytab.yml
+  when: not inventory_hostname.startswith('ipa')
 
 # SSSD-KCM has been showing way too many bugs with it saying "I have a ticket" while the ticket
 # is actually expired, and kinit's still not refreshing them and such alike.