diff --git a/freeipa.spec b/freeipa.spec
index 7bc6d68..d1fe1ec 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -15,7 +15,7 @@ distutils.sysconfig import get_python_lib; print(get_python_lib(1))")}
 
 Name:           freeipa
 Version:        3.0.0
-Release:        2%{?dist}
+Release:        3%{?dist}
 Summary:        The Identity, Policy and Audit system
 
 Group:          System Environment/Base
@@ -92,8 +92,8 @@ Requires(pre): 389-ds-base >= 1.3.0
 Requires: openldap-clients
 Requires: nss
 Requires: nss-tools
-Requires: krb5-server >= 1.10
-Requires: krb5-server < 1.11
+Requires: krb5-server >= 1.11
+Requires: krb5-server < 1.12
 Requires: krb5-pkinit-openssl
 Requires: cyrus-sasl-gssapi%{?_isa}
 Requires: ntp
@@ -196,7 +196,7 @@ Requires(postun): %{name}-server = %{version}-%{release}
 
 # Specific requires
 Requires(pre): 389-ds-base = 1.3.0
-Requires: krb5-server = 1.10.3
+Requires: krb5-server = 1.11
 Requires: pki-ca = 10.0.0
 
 %description server-strict
@@ -744,6 +744,9 @@ fi
 %ghost %attr(0644,root,apache) %config(noreplace) %{_sysconfdir}/ipa/ca.crt
 
 %changelog
+* Fri Oct 23 2012 Martin Kosek <mkosek@redhat.com> - 3.0.0-3
+- Update Requires on krb5-server to 1.11
+
 * Fri Oct 12 2012 Rob Crittenden <rcritten@redhat.com> - 3.0.0-2
 - Configure CA replication to use TLS instead of SSL