diff --git a/roles/cups/server/handlers/main.yml b/roles/cups/server/handlers/main.yml
new file mode 100644
index 0000000..7923ad8
--- /dev/null
+++ b/roles/cups/server/handlers/main.yml
@@ -0,0 +1,6 @@
+---
+
+- name: restart cups
+  service:
+    name: cups
+    state: restarted
diff --git a/roles/cups/server/tasks/main.yml b/roles/cups/server/tasks/main.yml
index cc3a4f8..bd1bcbe 100644
--- a/roles/cups/server/tasks/main.yml
+++ b/roles/cups/server/tasks/main.yml
@@ -28,6 +28,13 @@
     owner: root
     group: "{{ ansible_wheel }}"
 
+- name: enable gssapi authentication from cups
+  lineinfile:
+    path: /etc/cups/cupsd.conf
+    regexp: "^DefaultAuthType .*"
+    line: "DefaultAuthType Negotiate"
+  notify: restart cups
+
 - name: disable cups socket service
   systemd:
     name: cups.socket