diff --git a/freeipa.spec b/freeipa.spec
index 7d282a7..e78e25b 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -587,6 +587,7 @@ Requires: %{name}-common = %{version}-%{release}
 
 Requires: samba >= %{samba_version}
 Requires: samba-winbind
+Requires: sssd-winbind-idmap
 Requires: libsss_idmap
 %if 0%{?rhel}
 Obsoletes: ipa-idoverride-memberof-plugin <= 0.1
@@ -1690,6 +1691,11 @@ fi
 %endif
 
 %changelog
+* Fri Jul 16 2021 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.6-3
+- Add dependency on sssd-winbind-idmap for freeipa-server-trust-ad
+- Resolves: rhbz#1970168
+- Rebuild against Samba 4.15.0 RC1 (libndr soname bump)
+
 * Fri Jul 02 2021 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.6-2
 - Remove custodia dependencies as the code merged into FreeIPA now
 - Resolves: rhbz#1978632