diff --git a/.gitignore b/.gitignore
index caa2d6c..807abc9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,3 +2,4 @@ sudo-1.7.2p6.tar.gz
 sudo-1.7.2p2-sudoers
 /sudo-1.7.4p4.tar.gz
 /sudo-1.7.2p2-sudoers
+/sudo-1.7.4p4-sudoers
diff --git a/sources b/sources
index e748005..96e1461 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 55d9906535d70a1de347cd3d3550ee87  sudo-1.7.4p4.tar.gz
-d657d8d55ecdf88a2d11da73ac5662a4  sudo-1.7.2p2-sudoers
+56f74aed3a7b32f2b01a34d65ac86f85  sudo-1.7.4p4-sudoers
diff --git a/sudo.spec b/sudo.spec
index 8f6d88f..d090d90 100644
--- a/sudo.spec
+++ b/sudo.spec
@@ -1,12 +1,12 @@
 Summary: Allows restricted root access for specified users
 Name: sudo
 Version: 1.7.4p4
-Release: 4%{?dist}
+Release: 5%{?dist}
 License: ISC
 Group: Applications/System
 URL: http://www.courtesan.com/sudo/
 Source0: http://www.courtesan.com/sudo/dist/sudo-%{version}.tar.gz
-Source1: sudo-1.7.2p2-sudoers
+Source1: sudo-1.7.4p4-sudoers
 Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 Requires: /etc/pam.d/system-auth, vim-minimal
 
@@ -85,6 +85,8 @@ export CFLAGS="$RPM_OPT_FLAGS $F_PIE" LDFLAGS="-pie"
         --with-ignore-dot \
         --with-tty-tickets \
         --with-ldap \
+	--with-ldap-conf-file="%{_sysconfdir}/nss_ldap.conf" \
+	--with-ldap-secret-file="%{_sysconfdir}/nss_ldap.secret" \
 	--with-selinux \
 	--with-passprompt="[sudo] password for %p: " \
 	--with-linux-audit
@@ -150,6 +152,10 @@ rm -rf $RPM_BUILD_ROOT
 /bin/chmod 0440 /etc/sudoers || :
 
 %changelog
+* Tue Nov 30 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-5
+- anybody in the wheel group has now root access (using password) (rhbz#656873)
+- sync configuration paths with the nss_ldap package (rhbz#652687)
+
 * Wed Sep 29 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-4
 - added upstream patch to fix rhbz#638345