diff --git a/keyutils.changes b/keyutils.changes
index de3b2c3..d7efdbf 100644
--- a/keyutils.changes
+++ b/keyutils.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Nov 24 12:52:44 CET 2008 - meissner@suse.de
+
+- added 2 cifs helpers to request-key.conf (for CIFS DFS support)
+  bnc#432494, FATE#303758
+
 -------------------------------------------------------------------
 Thu Nov 13 00:03:14 CET 2008 - crrodriguez@suse.de
 
diff --git a/keyutils.spec b/keyutils.spec
index f97850e..e61f97e 100644
--- a/keyutils.spec
+++ b/keyutils.spec
@@ -25,10 +25,11 @@ Group:          System/Kernel
 AutoReqProv:    on
 Summary:        Linux Key Management Utilities
 Version:        1.2
-Release:        106
+Release:        107
 Source0:        http://people.redhat.com/~dhowells/keyutils/%name-%version.tar.bz2
+Patch0:         keyutils-1.2-strict-aliasing-punning.patch
+Patch1:         request-key-cifs.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
-Patch:          keyutils-1.2-strict-aliasing-punning.patch
 
 %description
 Utilities to control the kernel key management facility and to provide
@@ -73,7 +74,8 @@ Authors:
 
 %prep
 %setup -q
-%patch
+%patch0
+%patch1
 
 %build
 make NO_ARLIB=1 CFLAGS="$RPM_OPT_FLAGS"
@@ -106,6 +108,9 @@ make install NO_ARLIB=1 DESTDIR=$RPM_BUILD_ROOT LIBDIR=/%_lib USRLIBDIR=/usr/%_l
 %{_includedir}/*
 
 %changelog
+* Mon Nov 24 2008 meissner@suse.de
+- added 2 cifs helpers to request-key.conf (for CIFS DFS support)
+  bnc#432494, FATE#303758
 * Thu Nov 13 2008 crrodriguez@suse.de
 - build request-key.c with -fno-strict-aliasing to avoid
   possible breakages
diff --git a/request-key-cifs.patch b/request-key-cifs.patch
new file mode 100644
index 0000000..630ad57
--- /dev/null
+++ b/request-key-cifs.patch
@@ -0,0 +1,9 @@
+--- request-key.conf
++++ request-key.conf
+@@ -34,4 +34,6 @@
+ create	user	debug:*		negate		/bin/keyctl negate %k 30 %S
+ create	user	debug:loop:*	*		|/bin/cat
+ create	user	debug:*		*		/usr/share/keyutils/request-key-debug.sh %k %d %c %S
++create	cifs.spnego	*	*		/usr/sbin/cifs.upcall -c %k
++create	dns_resolver	*	*		/usr/sbin/cifs.upcall %k
+ negate	*	*		*		/bin/keyctl negate %k 30 %S