ipa[server,replica,client]: Do not try to execute tasks after the role test

The role test is executed in the ipa[server,replica,client] roles first.
These tests are usable in the Ansible test mode, but the folllowing steps
in the task list are not. Therefore the blocks following the tests are
limited to not being executed in test mode.

roles/ipaclient/tasks/install.yml

@@ -295,6 +295,8 @@
       nisdomain: "{{ ipaclient_nisdomain | default(omit)}}"
     when: not ipaclient_no_nisdomain | bool
 
+  when: not ansible_check_mode
+
   always:
   - name: Cleanup leftover ccache
     file:

roles/ipareplica/tasks/install.yml

@@ -622,3 +622,5 @@
       path: "/root/.ipa_cache"
       state: absent
     when: result_ipareplica_enable_ipa.changed
+
+  when: not ansible_check_mode

roles/ipaserver/tasks/install.yml

@@ -388,3 +388,5 @@
       {{ "--add-service=dns" if ipaserver_setup_dns | bool else "" }}
       {{ "--add-service=ntp" if not ipaclient_no_ntp | bool else "" }}
     when: ipaserver_setup_firewalld | bool
+
+  when: not ansible_check_mode