ipa/client: enable for download in prod

Signed-off-by: Nils Philippsen <nils@redhat.com>

inventory/group_vars/download

@@ -1,4 +1,8 @@
 ---
+primary_auth_source: ipa
+ipa_host_group: download
+ipa_host_group_desc: Download servers
+
 dl_tier1:
   - 128.171.104.148                    # mirror.ancl.hawaii.edu.
   - 129.101.198.59                     # University of Idaho

playbooks/groups/download.yml

@@ -31,8 +31,7 @@
   - rkhunter
   - nagios_client
   - hosts
-  - { role: ipa/client, when: env == "staging" }
-  - { role: fas_client, when: env != "staging" }
+  - ipa/client
   - collectd/base
   - apache
   - download
@@ -48,7 +47,6 @@
   - import_tasks: "{{ tasks_path }}/yumrepos.yml"
 
   tasks:
-  - import_tasks: "{{ tasks_path }}/2fa_client.yml"
   - import_tasks: "{{ tasks_path }}/motd.yml"
 
   - name: put in script for syncing on download-ib01