From ab94dc42eb64d4a04574abec1473060d8eb6f1b4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Aur=C3=A9lien=20Bompard?= <aurelien@bompard.org>
Date: Thu, 11 Feb 2021 13:42:23 +0100
Subject: [PATCH] IPA: until we get the ipaselfservice module, we need the
 admin ticket
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
---
 roles/ipa/server/tasks/main.yml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/roles/ipa/server/tasks/main.yml b/roles/ipa/server/tasks/main.yml
index d43b9ad36c..4b7dfd3ebc 100644
--- a/roles/ipa/server/tasks/main.yml
+++ b/roles/ipa/server/tasks/main.yml
@@ -460,16 +460,6 @@
   - config
   when: ipa_initial
 
-- name: Destroy admin ticket
-  command: kdestroy -A
-  tags:
-  - ipa/server
-  - keytab
-  - config
-  - krb5
-  when: ipa_initial
-
-
 # User selfservice permissions
 
 - name: Setup the selfservice permission for passwords
@@ -534,6 +524,16 @@
   when: ipa_initial and env == 'staging'
 
 
+- name: Destroy admin ticket
+  command: kdestroy -A
+  tags:
+  - ipa/server
+  - keytab
+  - config
+  - krb5
+  when: ipa_initial
+
+
 - name: Set the members of the admin group
   ipa_group:
     name: admins