diff --git a/roles/fas_server/tasks/main.yml b/roles/fas_server/tasks/main.yml
index d4ef658a9f..f41e344a9a 100644
--- a/roles/fas_server/tasks/main.yml
+++ b/roles/fas_server/tasks/main.yml
@@ -11,6 +11,7 @@
   - httpd
   - mod_wsgi
   - python-bunch
+  - python-requests-kerberos
   tags:
   - packages
   - fas
diff --git a/roles/fas_server/templates/fas.cfg.j2 b/roles/fas_server/templates/fas.cfg.j2
index 0f78c074c3..b554683c87 100644
--- a/roles/fas_server/templates/fas.cfg.j2
+++ b/roles/fas_server/templates/fas.cfg.j2
@@ -67,6 +67,8 @@ ipa_sync_principal = 'fas_sync@STG.FEDORAPROJECT.ORG'
 ipa_sync_keytab = '/etc/fas_sync_keytab'
 ipa_sync_certfile = '/etc/fas_sync_cert.pem'
 
+{% else %}
+ipa_sync_enabled = False
 {% endif %}
 ###
 ### Administrative settings
@@ -79,11 +81,9 @@ username_blacklist = "abuse,accounts,adm,admin,amanda,apache,askfedora,asterisk,
 username_blacklist = "abuse,accounts,adm,admin,amanda,apache,askfedora,asterisk,bin,board,bodhi,bodhi2,canna,census,chair,chairman,containerbuild,cvsdirsec,cvsdocs,cvseclipse,cvsextras,cvsfont,daemon,dbus,decode,desktop,dgilmore,directors,dovecot,dumper,fama,famsco,fas,fax,fedora,fedorarewards,fesco,freemedia,ftbfs,ftp,ftpadm,ftpadmin,ftpsync,games,gdm,gnomebackup,gopher,gregdek,halt,hostmaster,hotness,ident,info,ingres,jaboutboul,jan,keys,kojiadmin,ldap,legal,logo,lp,mail,mailnull,manager,marketing,masher,masta,mirrormanager,mysql,nagios,named,netdump,news,newsadm,newsadmin,nfsnobody,nobody,noc,notifications,nrpe,nscd,ntp,nut,openvideo,operator,packager,patrick,pcap,pkgdb,pkgsigner,postfix,postgres,postmaster,press,privoxy,pvm,quagga,radiusd,radvd,relnotes,relrod,rel-eng,root,rpc,rpcuser,rpm,rsc,s3-mirror,sales,scholarship,secalert,secondary-signer,security,server-wg,shutdown,smmsp,spevack,squid,sshd,support,sync,system,tickets,toor,updates,usenet,uucp,vcsa,vendors,vendor-support,voting,webalizer,webmaster,wikiadmin,wnn,www,xfs,zabbix"
 {% endif %}
 email_domain_blacklist = "{{ fas_blocked_emails }}"
-{% if env == "staging" %}
 
 # Valid SSH Key
 valid_ssh_key = "rsa,ssh-rsa,ecdsa,ecdsa-sha2"
-{% endif %}
 
 # admingroup has powers to change anything in the fas UI
 admingroup = 'accounts'