diff --git a/roles/ldap/server/templates/slapd.conf.j2 b/roles/ldap/server/templates/slapd.conf.j2
index a00f2c2..0fd38b7 100644
--- a/roles/ldap/server/templates/slapd.conf.j2
+++ b/roles/ldap/server/templates/slapd.conf.j2
@@ -50,6 +50,9 @@ TLSECName prime256v1
 TLSCipherSuite {{ tls_ciphers }}
 TLSProtocolMin 3.3
 
+# force hostname to get kerberos working correctly behind proxies
+sasl-host ldap.foo.sh
+
 #####################################################################
 # database {{ ldap_basedn }} configurations
 #####################################################################