diff --git a/openldap.spec b/openldap.spec
index 1adb7fc..eacc818 100644
--- a/openldap.spec
+++ b/openldap.spec
@@ -11,7 +11,7 @@
 Summary: The configuration files, libraries, and documentation for OpenLDAP
 Name: openldap
 Version: %{version}
-Release: 4%{?dist}
+Release: 5%{?dist}
 License: OpenLDAP
 Group: System Environment/Daemons
 Source0: ftp://ftp.OpenLDAP.org/pub/OpenLDAP/openldap-release/openldap-%{version}.tgz
@@ -399,7 +399,7 @@ rm -rf $RPM_BUILD_ROOT
 %pre servers
 # Take care to only do ownership-changing if we're adding the user.
 if /usr/sbin/useradd -c "LDAP User" -u 55 \
-    -s /bin/false -r -d /var/lib/ldap ldap 2> /dev/null ; then
+    -s /sbin/nologin -r -d /var/lib/ldap ldap 2> /dev/null ; then
     if [ -d /var/lib/ldap ] ; then
         for dbfile in /var/lib/ldap/* ; do
             if [ -f $dbfile ] ; then
@@ -597,6 +597,9 @@ fi
 %attr(0644,root,root)      %{evolution_connector_libdir}/*.a
 
 %changelog
+* Wed May 28 2008 Jan Safranek <jsafranek@redhat.com> 2.4.9-5
+- use /sbin/nologin as shell of ldap user (#447919)
+
 * Tue May 13 2008 Jan Safranek <jsafranek@redhat.com> 2.4.9-4
 - new upstream release
 - removed unnecessary MigrationTools patches