From f9a821f297ee69e6062eb0a5eef7e4591a1878c4 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Wed, 10 Aug 2016 00:33:27 +0000
Subject: [PATCH] Instead just mask kadmin

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 roles/ipa/tasks/main.yml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/roles/ipa/tasks/main.yml b/roles/ipa/tasks/main.yml
index 100d8a7f47..88b4b37e5f 100644
--- a/roles/ipa/tasks/main.yml
+++ b/roles/ipa/tasks/main.yml
@@ -37,10 +37,11 @@
   - ipa
   - config
 
-- name: disable kadmin
-  service: name=kadmin
-           enabled=no
+- name: mask kadmin
+  systemd: name=kadmin.service
            state=stopped
+           enabled=no
+           masked=yes
   tags:
   - ipa
   - config