diff --git a/389-ds-base.spec b/389-ds-base.spec
index c65675f..484bf18 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -22,7 +22,7 @@
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
 Version:          1.2.11.5
-Release:          %{?relprefix}1%{?prerel}%{?dist}
+Release:          %{?relprefix}2%{?prerel}%{?dist}
 License:          GPLv2 with exceptions
 URL:              http://port389.org/
 Group:            System Environment/Daemons
@@ -167,10 +167,12 @@ cp %{SOURCE2} README.devel
 OPENLDAP_FLAG="--with-openldap"
 %endif
 %{?with_tmpfiles_d: TMPFILES_FLAG="--with-tmpfiles-d=%{with_tmpfiles_d}"}
+# hack hack hack https://bugzilla.redhat.com/show_bug.cgi?id=833529
+NSSARGS="--with-svrcore-inc=%{_includedir} --with-svrcore-lib=%{_libdir} --with-nss-lib=%{_libdir} --with-nss-inc=%{_includedir}/nss3"
 %configure --enable-autobind --with-selinux $OPENLDAP_FLAG $TMPFILES_FLAG \
            --with-systemdsystemunitdir=%{_unitdir} \
            --with-systemdsystemconfdir=%{_sysconfdir}/systemd/system \
-           --with-systemdgroupname=%{groupname}
+           --with-systemdgroupname=%{groupname} $NSSARGS
 
 # Generate symbolic info for debuggers
 export XCFLAGS=$RPM_OPT_FLAGS
@@ -309,6 +311,9 @@ fi
 %{_libdir}/%{pkgname}/libslapd.so.*
 
 %changelog
+* Tue Jun 19 2012 Rich Megginson <rmeggins@redhat.com> - 1.2.11.5-2
+- workaround for https://bugzilla.redhat.com/show_bug.cgi?id=833529
+
 * Mon Jun 18 2012 Rich Megginson <rmeggins@redhat.com> - 1.2.11.5-1
 - Ticket #387 - managed entry sometimes doesn't delete the managed entry
 - 5903815 improve txn test index handling