diff --git a/ldap/manifests/init.pp b/ldap/manifests/init.pp
index e7f27d4..d7a30ec 100644
--- a/ldap/manifests/init.pp
+++ b/ldap/manifests/init.pp
@@ -164,7 +164,7 @@ class ldap::auth(
             if $auth == "gssapi" { 
                 augeas { "ldap-auth-set-principal":
                     context => "/files/etc/default/nslcd",
-                    changes => "set K5START_PRINCIPAL '${principal}'",
+                    changes => "set K5START_PRINCIPAL \"\'${principal}\'\"",
                     notify  => Service["nslcd"],
                 }
             }