mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-06-10 10:45:55 +00:00
When the client already has a working keytab, use_otp is disabled. This creates an issue when ipaclient_force_join is set, because the join module is called with ipaadmin_principal and ipaadmin_password, but these variables may be undefined if ipaadmin_keytab is used instead. We should not disable OTP when force-join is specified.