diff --git a/.gitignore b/.gitignore
index 4b72d93..2be38aa 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,3 +7,4 @@
 /389-ds-base-1.2.8.a2.tar.bz2
 /389-ds-base-1.2.8.a3.tar.bz2
 /389-ds-base-1.2.8.rc1.tar.bz2
+/389-ds-base-1.2.8.rc2.tar.bz2
diff --git a/389-ds-base-git-local.sh b/389-ds-base-git-local.sh
index 2129b50..6376029 100644
--- a/389-ds-base-git-local.sh
+++ b/389-ds-base-git-local.sh
@@ -2,7 +2,7 @@
 
 DATE=`date +%Y%m%d`
 # use a real tag name here
-VERSION=1.2.8.rc1
+VERSION=1.2.8.rc2
 PKGNAME=389-ds-base
 TAG=${TAG:-$PKGNAME-$VERSION}
 #SRCNAME=$PKGNAME-$VERSION-$DATE
diff --git a/389-ds-base-git.sh b/389-ds-base-git.sh
index a485f2b..47e6dd7 100644
--- a/389-ds-base-git.sh
+++ b/389-ds-base-git.sh
@@ -2,7 +2,7 @@
 
 DATE=`date +%Y%m%d`
 # use a real tag name here
-VERSION=1.2.8.rc1
+VERSION=1.2.8.rc2
 PKGNAME=389-ds-base
 TAG=${TAG:-$PKGNAME-$VERSION}
 URL="http://git.fedorahosted.org/git/?p=389/ds.git;a=snapshot;h=$TAG;sf=tgz"
diff --git a/389-ds-base.spec b/389-ds-base.spec
index bb182db..1482f70 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -3,7 +3,7 @@
 # for a pre-release, define the prerel field e.g. .a1 .rc2 - comment out for official release
 # also remove the space between % and global - this space is needed because
 # fedpkg verrel stupidly ignores comment lines
-%global prerel .rc1
+%global prerel .rc2
 # also need the relprefix field for a pre-release e.g. .0 - also comment out for official release
 %global relprefix 0.
 
@@ -16,7 +16,7 @@
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
 Version:          1.2.8
-Release:          %{?relprefix}7%{?prerel}%{?dist}
+Release:          %{?relprefix}8%{?prerel}%{?dist}
 License:          GPLv2 with exceptions
 URL:              http://port389.org/
 Group:            System Environment/Daemons
@@ -278,6 +278,19 @@ exit 0
 %{_libdir}/%{pkgname}/libslapd.so.*
 
 %changelog
+* Mon Mar 22 2011 Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.8.rc2
+- 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2
+- Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences
+- Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format
+- Bug 681015 - RFE: allow fine grained password policy duration attributes
+-              in days, hours, minutes, as well
+- Bug 684996 - Exported tombstone cannot be imported correctly
+- Bug 683250 - slapd crashing when traffic replayed
+- Bug 668909 - Can't modify replication agreement in some cases
+- Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1
+- Bug 644784 - Memory leak in "testbind.c" plugin
+- Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree
+
 * Mon Mar  7 2011 Caolán McNamara <caolanm@redhat.com> - 1.2.8-0.7.rc1
 - rebuild for icu 4.6
 
diff --git a/sources b/sources
index f00eee4..1eecead 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-6c1595ebc9949aa30505ac1cf0e05bb4  389-ds-base-1.2.8.rc1.tar.bz2
+f2a1956468a8ee0ba38dd5dd8a54d493  389-ds-base-1.2.8.rc2.tar.bz2