diff --git a/roles/itop/defaults/main.yml b/roles/itop/defaults/main.yml
index 144fd47..ca19ea6 100644
--- a/roles/itop/defaults/main.yml
+++ b/roles/itop/defaults/main.yml
@@ -2,10 +2,10 @@
 
 itop_id: 1
 itop_manage_upgrade: True
-itop_version: 2.7.2-1
-itop_build: 6483
+itop_version: 2.7.3
+itop_build: 6624
 itop_archive_url: https://sourceforge.net/projects/itop/files/itop/{{ itop_version }}/iTop-{{ itop_version }}-{{ itop_build }}.zip
-itop_archive_sha1: 8efede1ba82ce49e35e7eee8b652a75533bfef81
+itop_archive_sha1: 7ace43c939fc38fdbceb4ef4696ebe17141c3741
 
 itop_php_cas_version: 1.3.8
 itop_php_cas_archive_url: https://github.com/apereo/phpCAS/releases/download/{{ itop_php_cas_version }}/CAS-{{ itop_php_cas_version }}.tgz
diff --git a/roles/itop/tasks/cleanup.yml b/roles/itop/tasks/cleanup.yml
index 7bf951b..867f7a8 100644
--- a/roles/itop/tasks/cleanup.yml
+++ b/roles/itop/tasks/cleanup.yml
@@ -8,4 +8,6 @@
     - "{{ itop_root_dir }}/tmp/INSTALL"
     - "{{ itop_root_dir }}/tmp/README"
     - "{{ itop_root_dir }}/tmp/LICENSE"
+    - "{{ itop_root_dir }}/tmp/CAS-{{ itop_php_cas_version }}"
+    - "{{ itop_root_dir }}/tmp/CAS-{{ itop_php_cas_version }}.tgz"
   tags: itop
diff --git a/roles/itop/tasks/install.yml b/roles/itop/tasks/install.yml
index bea964e..250a160 100644
--- a/roles/itop/tasks/install.yml
+++ b/roles/itop/tasks/install.yml
@@ -47,7 +47,6 @@
         - synchro
         - sources
         - documentation
-        - extensions
     
     - name: Install new version of iTop
       synchronize:
diff --git a/roles/itop/templates/php.conf.j2 b/roles/itop/templates/php.conf.j2
index b218822..f82e130 100644
--- a/roles/itop/templates/php.conf.j2
+++ b/roles/itop/templates/php.conf.j2
@@ -28,7 +28,7 @@ php_admin_value[sys_temp_dir] = {{ itop_root_dir }}/tmp
 php_admin_value[post_max_size] = 21M
 php_admin_value[upload_max_filesize] = 20M
 php_admin_value[disable_functions] = system, show_source, symlink, dl, shell_exec, passthru, phpinfo, escapeshellcmd
-php_admin_value[open_basedir] = {{ itop_root_dir }}
+php_admin_value[open_basedir] = {{ itop_root_dir }}:/etc/pki/tls/cert.pem
 ; DB schema upgrade can be very long
 php_admin_value[max_execution_time] = 1800
 php_admin_value[max_input_time] = 120