From a3203b995082d045087899d68fc60a1bcaf6670f Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Tue, 20 Dec 2016 05:24:05 +0000
Subject: [PATCH] Record original

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 playbooks/groups/ipa.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/playbooks/groups/ipa.yml b/playbooks/groups/ipa.yml
index 226da3e8f3..de4cfd59eb 100644
--- a/playbooks/groups/ipa.yml
+++ b/playbooks/groups/ipa.yml
@@ -56,9 +56,11 @@
   tasks:
   - name: Combine IPA keytabs
     shell: printf "%b" "read_kt /etc/httpd/conf/ipa.keytab\nread_kt /etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab\nwrite_kt /etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab.combined" | ktutil
+    changed_when: false
     tags:
     - krb5
     - ipa/server
+  # original: /etc/httpd/conf/ipa.keytab
   - name: Make IPA HTTP use the combined keytab
     lineinfile: dest=/etc/httpd/conf.d/ipa.conf
                 regexp='GssapiCredStore keytab:'