roles/ipaclient/tasks/install.yml: Do not set principal with keytab for join

This commit is contained in:
Thomas Woerner
2017-09-15 18:56:09 +02:00
parent 6dcecdc296
commit 8daef41e0a

View File

@@ -75,7 +75,7 @@
basedn: "{{ ipadiscovery.basedn }}"
hostname: "{{ ipadiscovery.hostname }}"
force_join: "{{ ipaclient_force_join | default(omit) }}"
principal: "{{ ipaclient_principal if not ipaclient_use_otp | bool else '' }}"
principal: "{{ ipaclient_principal if not ipaclient_use_otp | bool and not ipaclient_keytab else '' }}"
password: "{{ ipaclient_password | default(omit) }}"
keytab: "{{ ipaclient_keytab | default(omit) }}"
#ca_cert_file: "{{ ipaclient_ca_cert_file | default(omit) }}"