diff --git a/manifests/auth.pp b/manifests/auth.pp
index 2e8dabcc29aff5a351c1e08bdbb15aa7b89644f4..4cf8318c697b4e4f9cd6d52268a88a6639049e80 100644
--- a/manifests/auth.pp
+++ b/manifests/auth.pp
@@ -136,11 +136,12 @@ class aes::auth (
     notify   => Exec['compile-auth-repo'],
   }
 
+  # Note: We need a login shell, otherwise PATH and HOME are not set.
   exec { 'compile-auth-repo':
     user        => $auth_user,
     group       => $auth_group,
     path        => $auth_home,
-    command     => "$auth_home/on_update.sh",
+    command     => "/bin/bash -l $auth_home/on_update.sh",
     refreshonly => true,
     require     => File["${auth_home}/on_update.sh"],
     notify      => Service[$auth_service],