diff --git a/krb5.changes b/krb5.changes
index 74dfbb6..1a60cdb 100644
--- a/krb5.changes
+++ b/krb5.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Mon May  3 09:40:17 UTC 2021 - Rodrigo Lourenço <rzl@rzl.ooo>
+
+- Build with full Cyrus SASL support
+  * Negotiating SASL credentials with an EXTERNAL bind mechanism requires
+    interaction. Kerberos provides its own interaction function that skips
+    all interaction, thus preventing the mechanism from working.
+
 -------------------------------------------------------------------
 Thu Apr 22 15:10:12 UTC 2021 - Samuel Cabrero <scabrero@suse.de>
 
diff --git a/krb5.spec b/krb5.spec
index 71a9286..4ac870c 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -44,6 +44,7 @@ Patch7:         0007-SELinux-integration.patch
 Patch8:         0008-krb5-1.9-debuginfo.patch
 BuildRequires:  autoconf
 BuildRequires:  bison
+BuildRequires:  cyrus-sasl-devel
 BuildRequires:  keyutils
 BuildRequires:  keyutils-devel
 BuildRequires:  openldap2-devel