diff --git a/freeipa.spec b/freeipa.spec
index d483932..5db83ec 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -163,7 +163,13 @@ Obsoletes: freeipa-server-selinux < 3.3.0
 # IPA but if it is configured we need a way to require versions
 # that work for us.
 Conflicts: bind-dyndb-ldap < 6.0-4
-Conflicts: bind < 9.9.6-2
+%if 0%{?fedora} >= 21
+Conflicts: bind < 9.9.6-3
+Conflicts: bind-utils < 9.9.6-3
+%else
+Conflicts: bind < 9.9.4-19
+Conflicts: bind-utils < 9.9.4-19
+%endif
 # DNSSEC
 Conflicts: opendnssec < 1.4.6-4