diff --git a/0001-krb5-1.15-build-fix.patch b/0001-krb5-1.15-build-fix.patch
new file mode 100644
index 0000000..e6ebb32
--- /dev/null
+++ b/0001-krb5-1.15-build-fix.patch
@@ -0,0 +1,29 @@
+From: Jan Engelhardt <jengelh@inai.de>
+Date: 2016-12-07 11:36:34.201377440 +0100
+Upstream: no
+
+build: unlock all krb5 versions
+
+The check is really stupid (like testing for "2.6.*" kernel was elsewhere), as
+it prevents using future versions. The check should have tested
+for {1.[0-9]:reject} instead.
+
+Anyway, unlock all versions. The minimum requirement is enforced
+in openSUSE by way of the spec file.
+---
+ src/external/pac_responder.m4 |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+Index: sssd-1.14.2/src/external/pac_responder.m4
+===================================================================
+--- sssd-1.14.2.orig/src/external/pac_responder.m4
++++ sssd-1.14.2/src/external/pac_responder.m4
+@@ -11,7 +11,7 @@ then
+     AC_MSG_CHECKING(for supported MIT krb5 version)
+     KRB5_VERSION="`$KRB5_CONFIG --version`"
+     case $KRB5_VERSION in
+-        Kerberos\ 5\ release\ 1.9* | \
++        Kerberos\ 5\ release\ 1.* | \
+         Kerberos\ 5\ release\ 1.10* | \
+         Kerberos\ 5\ release\ 1.11* | \
+         Kerberos\ 5\ release\ 1.12* | \
diff --git a/sssd.changes b/sssd.changes
index 34aef48..5fff7f9 100644
--- a/sssd.changes
+++ b/sssd.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Dec  7 10:39:30 UTC 2016 - jengelh@inai.de
+
+- Add 0001-krb5-1.15-build-fix.patch to unlock building
+  against future KRB versions.
+
 -------------------------------------------------------------------
 Wed Oct 19 22:21:30 UTC 2016 - michael@stroeder.com
 
diff --git a/sssd.spec b/sssd.spec
index 90b7900..1cb5545 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -32,6 +32,9 @@ Source4:        sssd.service
 Source5:        %name.keyring
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
+# see https://build.opensuse.org/request/show/443977
+Patch1:         0001-krb5-1.15-build-fix.patch
+
 %define servicename	sssd
 %define sssdstatedir	%_localstatedir/lib/sss
 %define dbpath		%sssdstatedir/db
@@ -378,6 +381,7 @@ Security Services Daemon (sssd).
 
 %prep
 %setup -q
+%patch -P 1 -p1
 
 %build
 %if 0%{?suse_version} < 1210