diff --git a/openldap.spec b/openldap.spec
index 879a14c..d53cd83 100644
--- a/openldap.spec
+++ b/openldap.spec
@@ -8,7 +8,7 @@
 Summary: The configuration files, libraries, and documentation for OpenLDAP
 Name: openldap
 Version: %{version}
-Release: 3%{?dist}.1
+Release: 4%{?dist}
 License: OpenLDAP
 Group: System Environment/Daemons
 Source0: ftp://ftp.OpenLDAP.org/pub/OpenLDAP/openldap-release/openldap-%{version}.tgz
@@ -406,7 +406,7 @@ rm -rf $RPM_BUILD_ROOT
 %pre servers
 # Take care to only do ownership-changing if we're adding the user.
 if /usr/sbin/useradd -c "LDAP User" -u 55 \
-    -s /bin/false -r -d /var/lib/ldap ldap 2> /dev/null ; then
+    -s /sbin/nologin -r -d /var/lib/ldap ldap 2> /dev/null ; then
     if [ -d /var/lib/ldap ] ; then
         for dbfile in /var/lib/ldap/* ; do
             if [ -f $dbfile ] ; then
@@ -561,6 +561,9 @@ fi
 %attr(0644,root,root)      %{evolution_connector_libdir}/*.a
 
 %changelog
+* Wed May 28 2008 Jan Safranek <jsafranek@redhat.com> 2.4.8-4
+- use /sbin/nologin as shell of ldap user (#447919)
+
 * Thu May 22 2008 Tom "spot" Callaway <tcallawa@redhat.com> 2.4.8-3.1
 - minor bump for sparc rebuild