diff --git a/roles/ipa/client/tasks/main.yml b/roles/ipa/client/tasks/main.yml
index 96b2bf393a..2d7813c0e7 100644
--- a/roles/ipa/client/tasks/main.yml
+++ b/roles/ipa/client/tasks/main.yml
@@ -78,6 +78,7 @@
   tags:
   - ipa/client
   - config
+  - fedora-nss-ignore
   notify:
     - restart sssd
     - clean sss caches