diff --git a/ad-auth/handlers/main.yml b/ad-auth/handlers/main.yml
index 9701fe66317e02251fa7df25e9637294b3af0698..56e99014b594c3459a7d297a5e3e7bfcf89e0793 100644
--- a/ad-auth/handlers/main.yml
+++ b/ad-auth/handlers/main.yml
@@ -5,17 +5,20 @@
   file:
     path: /var/lib/pam/
     state: "{{ item }}"
-    mode: 0755
+    mode: "0755"
     owner: root
     group: root
-  with_items: 
+  with_items:
     - absent
     - directory
+  listen: "regenerate pam config"
 
-- name: regenerate pam config
-  shell: rm -f /var/lib/pam/* && pam-auth-update --force
+- name: update pam
+  command: pam-auth-update --force
   environment:
     DEBIAN_FRONTEND: noninteractive
+  listen: "regenerate pam config"
+
 
 - name: clear sssd cache
   command: sss_cache -E