diff --git a/ad-auth/handlers/main.yml b/ad-auth/handlers/main.yml
index 9701fe66317e02251fa7df25e9637294b3af0698..27f2e9ea390094e8202bab9f17bd5a43e6f26b83 100644
--- a/ad-auth/handlers/main.yml
+++ b/ad-auth/handlers/main.yml
@@ -5,17 +5,19 @@
   file:
     path: /var/lib/pam/
     state: "{{ item }}"
-    mode: 0755
+    mode: "0755"
     owner: root
     group: root
-  with_items: 
+  with_items:
     - absent
     - directory
+  listen: "regenerate pam config"
 
-- name: regenerate pam config
-  shell: rm -f /var/lib/pam/* && pam-auth-update --force
+- name: update pam
+  command: pam-auth-update --force
   environment:
     DEBIAN_FRONTEND: noninteractive
+  listen: "regenerate pam config"
 
 - name: clear sssd cache
   command: sss_cache -E