diff --git a/library/ipajoin.py b/library/ipajoin.py
index 9c732044..efb72dda 100644
--- a/library/ipajoin.py
+++ b/library/ipajoin.py
@@ -71,6 +71,7 @@ options:
   kinit_attempts:
     description: Repeat the request for host Kerberos ticket X times.
     required: false
+    default: 5
   debug:
     description: Enable debug mode.
     required: false
@@ -198,7 +199,7 @@ def main():
             keytab=dict(required=False),
             ca_cert_file=dict(required=False),
             force_join=dict(required=False, type='bool'),
-            kinit_attempts=dict(required=False, type='int'),
+            kinit_attempts=dict(required=False, type='int', default=5),
             debug=dict(required=False, type='bool'),
         ),
         mutually_exclusive = [['password','keytab']],
diff --git a/roles/ipaclient/defaults/main.yml b/roles/ipaclient/defaults/main.yml
index 11ac7589..a1a6d5ec 100644
--- a/roles/ipaclient/defaults/main.yml
+++ b/roles/ipaclient/defaults/main.yml
@@ -4,3 +4,4 @@
 ipaclient_force_join: no
 ipaclient_ntp: no
 ipaclient_mkhomedir: no
+ipaclient_kinit_attempts: 5