diff --git a/roles/mkhomedir/handlers/main.yml b/roles/mkhomedir/handlers/main.yml
new file mode 100644
index 0000000..5c41bb0
--- /dev/null
+++ b/roles/mkhomedir/handlers/main.yml
@@ -0,0 +1,5 @@
+---
+- name: restart oddjobd
+  service:
+    name: oddjobd
+    state: restarted
diff --git a/roles/mkhomedir/tasks/main.yml b/roles/mkhomedir/tasks/main.yml
new file mode 100644
index 0000000..c227044
--- /dev/null
+++ b/roles/mkhomedir/tasks/main.yml
@@ -0,0 +1,22 @@
+---
+- name: install packages
+  package:
+    name: oddjob-mkhomedir
+    state: installed
+
+- name: get current state of authselect
+  shell: /usr/bin/authselect current --raw ; /bin/true
+  register: result
+  check_mode: false
+  changed_when: false
+
+- name: enable mkhomedir
+  command: /usr/bin/authselect enable-feature with-mkhomedir
+  when: "'with-mkhomedir' not in result.stdout"
+  notify: restart oddjobd
+
+- name: enable oddjobd service
+  service:
+    name: oddjobd
+    state: started
+    enabled: true