diff --git a/roles/ipa/tasks/main.yml b/roles/ipa/tasks/main.yml
index d4ca0d4555..b3d63bc3c7 100644
--- a/roles/ipa/tasks/main.yml
+++ b/roles/ipa/tasks/main.yml
@@ -37,11 +37,14 @@
   - ipa
   - config
 
+#
+# switch this to use the systemd module as soon as ansible 2.2 is out.
+#
+
 - name: mask kadmin
-  service: name=kadmin.service
-           state=stopped
-           enabled=no
-           masked=yes
+  file: src=/dev/null
+        dest=/etc/systemd/system/kadmin.service
+        owner=root group=root state=link
   tags:
   - ipa
   - config