diff --git a/roles/nfs-client/tasks/main.yml b/roles/nfs-client/tasks/main.yml
index 909aa7c..2a09463 100644
--- a/roles/nfs-client/tasks/main.yml
+++ b/roles/nfs-client/tasks/main.yml
@@ -10,6 +10,12 @@
     regexp: '^#?Domain\s*=.*'
     line: "Domain = {{ mail_domain }}"
 
+- name: allow gssproxy to connect kerberos servers over https
+  seboolean:
+    name: nis_enabled
+    state: true
+    persistent: true
+
 - name: enable rpc-gssd services
   service:
     name: rpc-gssd