diff --git a/defaults/main.yml b/defaults/main.yml
index e8170bc..0dab645 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -7,3 +7,5 @@ sshd_ciphers:           'chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,ae
 sshd_macs:              'hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256'
 sshd_kex_algorithms:    'curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256'
 sshd_host_keys:         [/etc/ssh/ssh_host_ed25519_key, /etc/ssh/ssh_host_rsa_key]
+sshd_kerberos_authentication: 'no'
+sshd_gssapi_authentication:   'no'
diff --git a/tasks/sshd_config.yml b/tasks/sshd_config.yml
index cbd76aa..15586c8 100644
--- a/tasks/sshd_config.yml
+++ b/tasks/sshd_config.yml
@@ -42,8 +42,8 @@
       PermitRootLogin:        '{{sshd_permit_root_login}}'
       StrictModes:            'yes'
       PubkeyAuthentication:   'yes'
-      KerberosAuthentication: '{{sshd_kerberos_authentication|default(omit)}}'
-      GSSAPIAuthentication:   '{{sshd_gssapi_authentication|default(omit)}}'
+      KerberosAuthentication: '{{sshd_kerberos_authentication}}'
+      GSSAPIAuthentication:   '{{sshd_gssapi_authentication}}'
       TCPKeepAlive:           'yes'
       Ciphers:                '{{sshd_ciphers}}'
       MACs:                   '{{sshd_macs}}'