diff --git a/nss-pam-ldapd.spec b/nss-pam-ldapd.spec
index 396133f..45f62e7 100644
--- a/nss-pam-ldapd.spec
+++ b/nss-pam-ldapd.spec
@@ -1,6 +1,6 @@
 Name:		nss-pam-ldapd
 Version:	0.7.13
-Release:	3%{?dist}
+Release:	4%{?dist}
 Summary:	An nsswitch module which uses directory servers
 Group:		System Environment/Base
 License:	LGPLv2+
@@ -71,7 +71,7 @@ rm -rf $RPM_BUILD_ROOT
 %{_sbindir}/*
 /%{_lib}/*.so.*
 %{_mandir}/*/*
-%attr(0600,root,root) %config(noreplace) /etc/nslcd.conf
+%attr(0600,root,root) %config(noreplace) %verify(not md5 size mtime) /etc/nslcd.conf
 %attr(0644,root,root) %config(noreplace) /etc/tmpfiles.d/%{name}.conf
 %attr(0755,root,root) %{_initddir}/nslcd
 %attr(0755,nslcd,root) /var/run/nslcd
@@ -175,6 +175,10 @@ fi
 exit 0
 
 %changelog
+* Wed Mar 30 2011 Nalin Dahyabhai <nalin@redhat.com> 0.7.13-4
+- tag nslcd.conf with %%verify(not md5 size mtime), since we always tweak
+  it in %%post (#692225)
+
 * Tue Mar  1 2011 Nalin Dahyabhai <nalin@redhat.com> 0.7.13-3
 - add a tmpfiles configuration to ensure that /var/run/nslcd is created when
   /var/run is completely empty at boot (#656643)