diff --git a/roles/kerberos/kdc/tasks/main.yml b/roles/kerberos/kdc/tasks/main.yml
index a181489..4661884 100644
--- a/roles/kerberos/kdc/tasks/main.yml
+++ b/roles/kerberos/kdc/tasks/main.yml
@@ -16,6 +16,18 @@
     group: "{{ ansible_wheel }}"
   notify: restart kdc
 
+- name: store ldap auth credentials
+  shell: "( echo '{{ kerberos_kdc_pass }}' ; echo '{{ kerberos_kdc_pass }}' ) | kdb5_ldap_util stashsrvpw uid=krb5kdc,cn={{ kerberos_realm }},ou=System,{{ ldap_basedn }}"
+  args:
+    creates: "/var/kerberos/krb5kdc/.k5.ldap.{{ kerberos_realm|lower() }}"
+  no_log: true
+
+- name: store kdc master key
+  shell: "echo '{{ kerberos_master_pass }}' | kdb5_util stash"
+  args:
+    creates: "/var/kerberos/krb5kdc/.k5.{{ kerberos_realm }}"
+  no_log: true
+
 - name: enable kerberos service
   service:
     name: krb5kdc