IPA: until we get the ipaselfservice module, we need the admin ticket

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>

roles/ipa/server/tasks/main.yml

@@ -460,16 +460,6 @@
   - config
   when: ipa_initial
 
-- name: Destroy admin ticket
-  command: kdestroy -A
-  tags:
-  - ipa/server
-  - keytab
-  - config
-  - krb5
-  when: ipa_initial
-
-
 # User selfservice permissions
 
 - name: Setup the selfservice permission for passwords
@@ -534,6 +524,16 @@
   when: ipa_initial and env == 'staging'
 
 
+- name: Destroy admin ticket
+  command: kdestroy -A
+  tags:
+  - ipa/server
+  - keytab
+  - config
+  - krb5
+  when: ipa_initial
+
+
 - name: Set the members of the admin group
   ipa_group:
     name: admins