diff --git a/cyrus-sasl.spec b/cyrus-sasl.spec
index 7abc63e..1a09bb7 100644
--- a/cyrus-sasl.spec
+++ b/cyrus-sasl.spec
@@ -436,6 +436,9 @@ exit 0
 /etc/rc.d/init.d/saslauthd
 
 %changelog
+* Mon Jan 09 2012 Jeroen van Meeuwen <vanmeeuwen@kolabsys.com> - 2.1.23-28
+- Ship with sasl_pwcheck_method: alwaystrue
+
 * Mon Dec 12 2011 Petr Lautrbach <plautrba@redhat.com> 2.1.23-27
 - remove support for logging of the remote host via PAM (#759334)
 - fix systemd files (#750436)