Refactor print server deployment order

playbooks/print.yml

@@ -13,10 +13,6 @@
     - base
     - sssd
     - mkhomedir
-    - cups-server
-    - role: kerberos/keytab
-      keytab: /etc/cups/cups.keytab
-      principals: "HTTP/print.foo.sh@{{ kerberos_realm }}"
 
   tasks:
     - name: copy dns zone files
@@ -32,3 +28,14 @@
         - print.foo.sh
     - import_role:
         name: unbound
+
+    - name: run handlers to get nsswitch configured
+      meta: flush_handlers
+
+    - import_role:
+        name: cups-server
+    - import_role:
+        name: kerberos/keytab
+      vars:
+        keytab: /etc/cups/cups.keytab
+        principals: "HTTP/print.foo.sh@{{ kerberos_realm }}"