diff --git a/roles/keytab/service/tasks/main.yml b/roles/keytab/service/tasks/main.yml
index a975be53ee..4ef6fbee46 100644
--- a/roles/keytab/service/tasks/main.yml
+++ b/roles/keytab/service/tasks/main.yml
@@ -80,7 +80,7 @@
 - name: Retrieve keytab
   command: ipa-getkeytab --retrieve --server {{ipa_server}} --keytab {{kt_location}} --principal {{service}}/{{host}}
   register: retrieve_result
-  failed_when: "not ('Keytab successfully retrieved' in retrieve_result.stdout or 'krbPrincipalKey not found' in retrieve_result.stderr)"
+  failed_when: "not ('Keytab successfully retrieved' in retrieve_result.stderr or 'krbPrincipalKey not found' in retrieve_result.stderr)"
   tags:
   - keytab
   - config