diff --git a/ad-auth/tasks/sssd.yml b/ad-auth/tasks/sssd.yml
index 22f9807a72f5946bd11357f4e768a8d23cd5837b..0651881bf42929b0996865d7bf23d08d32872c22 100644
--- a/ad-auth/tasks/sssd.yml
+++ b/ad-auth/tasks/sssd.yml
@@ -115,3 +115,17 @@
     group: root
   tags:
     - sssd
+
+# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1037930
+# https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org/thread/HQKQOX53YJ2DUNPYPQ4LC7R56UXO2R3Z/#27FR2CRABDFJIVXRFZUXF5GHDKF7PGT7
+# https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org/message/IUE3FRAV7OPFHELKWDZRPVZ2XMHBQM4R/
+- name: Disable sssd-pac service
+  systemd:
+    name: sssd-pac.socket
+    state: stopped
+    enabled: false
+  when:
+    - ansible_distribution == "Debian"
+    - ansible_distribution_major_version | int >= 12
+  tags:
+    - sssd