diff --git a/sssd.changes b/sssd.changes
index c2be64d..bb9a6ee 100644
--- a/sssd.changes
+++ b/sssd.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Mar 16 13:32:12 UTC 2017 - hguo@suse.com
+
+- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
+  krb5-common sub-package. Address bsc#1024836.
+
 -------------------------------------------------------------------
 Wed Mar 15 22:18:03 UTC 2017 - michael@stroeder.com
 
diff --git a/sssd.spec b/sssd.spec
index b826715..0131435 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -143,6 +143,7 @@ against a Kerberos server.
 Summary:        SSSD helpers needed for Kerberos and GSSAPI authentication
 License:        GPL-3.0+
 Group:          System/Daemons
+Requires:       cyrus-sasl-gssapi
 
 %description krb5-common
 Provides helper processes that the LDAP and Kerberos back ends can