diff --git a/freeipa.spec b/freeipa.spec
index d27858b..dc1d982 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -12,11 +12,11 @@ distutils.sysconfig import get_python_lib; print(get_python_lib(1))")}
 %global POLICYCOREUTILSVER 1.33.12-1
 %global gettext_domain ipa
 
-%global git_commit .rc1
+%global git_commit .rc2
 
 Name:           freeipa
 Version:        2.0.0
-Release:        0.3.rc1%{?dist}
+Release:        0.4.rc2%{?dist}
 Summary:        The Identity, Policy and Audit system
 
 Group:          System Environment/Base
@@ -25,37 +25,38 @@ URL:            http://www.freeipa.org/
 # This source is temporary until the final release of FreeIPA
 Source0:        freeipa-%{version}%{git_commit}.tar.gz
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Patch1:         freeipa-rcrit-743-dsgroup.patch
 
 %if ! %{ONLY_CLIENT}
 BuildRequires:  389-ds-base-devel >= 1.2.8
 BuildRequires:  svrcore-devel
+BuildRequires:  /usr/share/selinux/devel/Makefile
+BuildRequires:  policycoreutils >= %{POLICYCOREUTILSVER}
+%endif
 BuildRequires:  nspr-devel
+BuildRequires:  nss-devel
 BuildRequires:  openssl-devel
 BuildRequires:  openldap-devel
 BuildRequires:  krb5-devel
-BuildRequires:  nss-devel
-BuildRequires:  python-devel
+BuildRequires:  krb5-workstation
+BuildRequires:  libuuid-devel
+BuildRequires:  xmlrpc-c-devel
+BuildRequires:  libcurl-devel
+BuildRequires:  popt-devel
 BuildRequires:  autoconf
 BuildRequires:  automake
-BuildRequires:  libtool
-BuildRequires:  popt-devel
-BuildRequires:  /usr/share/selinux/devel/Makefile
 BuildRequires:  m4
-BuildRequires:  policycoreutils >= %{POLICYCOREUTILSVER}
+BuildRequires:  libtool
+BuildRequires:  gettext
+BuildRequires:  python-devel
+BuildRequires:  authconfig
+BuildRequires:  python-ldap
 BuildRequires:  python-setuptools
 BuildRequires:  python-krbV
 BuildRequires:  python-nss
 BuildRequires:  python-netaddr
 BuildRequires:  python-kerberos
-BuildRequires:  python-ldap
-BuildRequires:  krb5-workstation
-BuildRequires:  xmlrpc-c-devel
-BuildRequires:  libcurl-devel
-BuildRequires:  gettext
-BuildRequires:  authconfig
-BuildRequires:  libuuid-devel
 BuildRequires:  pyOpenSSL
-%endif
 
 %description
 IPA is an integrated solution to provide centrally managed Identity (machine,
@@ -141,6 +142,7 @@ Requires: xmlrpc-c
 Requires: sssd >= 1.5.1
 Requires: certmonger >= 0.26
 Requires: nss-tools
+Requires: bind-utils
 
 Obsoletes: ipa-client >= 1.0
 
@@ -180,7 +182,7 @@ Requires: python-kerberos >= 1.1-3
 Requires: authconfig
 Requires: gnupg
 Requires: pyOpenSSL
-Requires: python-nss >= 0.9-8
+Requires: python-nss >= 0.11
 Requires: python-lxml
 Requires: python-netaddr
 
@@ -196,6 +198,7 @@ package.
 
 %prep
 %setup -n freeipa-%{version}%{git_commit} -q
+%patch1 -p1
 
 %build
 export CFLAGS="$CFLAGS %{optflags}"
@@ -457,6 +460,7 @@ fi
 %{_mandir}/man1/ipa-rmkeytab.1.gz
 %{_mandir}/man1/ipa-client-install.1.gz
 %{_mandir}/man1/ipa-join.1.gz
+%{_mandir}/man5/default.conf.5.gz
 
 %if ! %{ONLY_CLIENT}
 %files admintools
@@ -483,6 +487,13 @@ fi
 %ghost %attr(0644,root,apache) %config(noreplace) %{_sysconfdir}/ipa/default.conf
 
 %changelog
+* Fri Feb 25 2011 Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.4.rc2
+- Update to upstream freeipa-2.0.0.rc2
+- Set minimum version of python-nss to 0.11 to make sure IPv6 support is in
+- Set minimum version of sssd to 1.5.1
+- Patch to include SuiteSpotGroup when setting up 389-ds instances
+- Move a lot of BuildRequires so this will build with ONLY_CLIENT enabled
+
 * Tue Feb 15 2011 Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.3.rc1
 - Set the N-V-R so rc1 is an update to beta2.