diff --git a/roles/ipa/server/tasks/main.yml b/roles/ipa/server/tasks/main.yml
index aaa2767c5f..7372fd83b4 100644
--- a/roles/ipa/server/tasks/main.yml
+++ b/roles/ipa/server/tasks/main.yml
@@ -173,7 +173,7 @@
   when: inventory_hostname.startswith("ipa01")
   register: pwpolicy_output
   changed_when: "'no modifications to be performed' not in pwpolicy_output.stderr"
-  failed_when: "'no modifications to be performed' not in pwpolicy_output.stdout and pwpolicy_output.rc != 0"
+  failed_when: "'no modifications to be performed' not in pwpolicy_output.stderr and pwpolicy_output.rc != 0"
 
 - name: Destroy admin ticket
   command: kdestroy -A