diff --git a/paris-container.nix b/paris-container.nix
index 3b66247..37ad2a1 100644
--- a/paris-container.nix
+++ b/paris-container.nix
@@ -307,7 +307,10 @@ in {
         services = {
           openssh = {
             enable = true;
-            package = pkgs.openssh_hpnWithKerberos;
+            package = if (!isNull cfg.kerberos) then
+              pkgs.openssh_hpnWithKerberos
+            else
+              pkgs.openssh_hpn;
             startWhenNeeded = true;
             permitRootLogin = "no";
             hostKeys = map (keypair: {