diff --git a/krb5.spec b/krb5.spec
index 2ee81f7..7e9e664 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -736,6 +736,9 @@ exit 0
 %dir %{_libdir}/krb5/plugins
 %dir %{_libdir}/krb5/plugins/*
 %{_libdir}/krb5/plugins/kdb/db2.so
+%dir %{_var}/kerberos
+%dir %{_var}/kerberos/kdc
+%dir %{_var}/kerberos/kdc/user
 %if ! %{WITH_SYSVERTO}
 # These really shouldn't be here, but until we have a system copy of libverto,
 # don't force people who are using libverto to install the KDC just to get the