From a4b5dfce5bb2d1663d232f9555981feb3702684e Mon Sep 17 00:00:00 2001
From: Nils Philippsen <nils@redhat.com>
Date: Fri, 19 Mar 2021 18:24:57 +0100
Subject: [PATCH] ipa/client: only install sudoers on FAS clients

Signed-off-by: Nils Philippsen <nils@redhat.com>
---
 roles/sudo/tasks/main.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/roles/sudo/tasks/main.yml b/roles/sudo/tasks/main.yml
index aede6ad697..00d6afbf07 100644
--- a/roles/sudo/tasks/main.yml
+++ b/roles/sudo/tasks/main.yml
@@ -8,7 +8,7 @@
 #
 - name: setup /etc/sudoers.d/01-sysadmin-main
   copy: src="{{ private }}/files/sudo/sysadmin-main" dest=/etc/sudoers.d/01-sysadmin-main owner=root group=root mode=0600
-  when: sudoers_main is not defined
+  when: "sudoers_main is not defined and (primary_auth_source | default('fas')) == 'fas'"
   tags:
   - config
   - sudo
@@ -44,6 +44,7 @@
   - "{{ private }}/files/sudo/{{ ansible_hostname }}-sudoers"
   - "{{ private }}/files/sudo/{{ ansible_domain }}-sudoers"
   - "{{ private }}/files/sudo/default"
+  when: "(primary_auth_source | default('fas')) == 'fas'"
   tags:
   - config
   - sudo