diff --git a/roles/samba-dc/tasks/main.yml b/roles/samba-dc/tasks/main.yml
index 495ee09..4bbf9a7 100644
--- a/roles/samba-dc/tasks/main.yml
+++ b/roles/samba-dc/tasks/main.yml
@@ -89,5 +89,5 @@
 - name: ensure host keytab exists
   command: >-
     samba-tool domain exportkeytab /etc/krb5.keytab
-    --principal=host/{{ ansible_fqdn }}}
+    --principal=host/{{ ansible_fqdn }}
     creates=/etc/krb5.keytab