diff --git a/openCryptoki.changes b/openCryptoki.changes
index d27f710..91eefc8 100644
--- a/openCryptoki.changes
+++ b/openCryptoki.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Fri Jan 23 07:42:59 CET 2009 - olh@suse.de
+
+- run ldconfig in postinstall [bnc#417925]
+
 -------------------------------------------------------------------
 Tue Dec  9 14:16:37 CET 2008 - kukuk@suse.de
 
diff --git a/openCryptoki.spec b/openCryptoki.spec
index e622d1d..3165b73 100644
--- a/openCryptoki.spec
+++ b/openCryptoki.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package openCryptoki (Version 2.2.6)
 #
-# Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -30,7 +30,7 @@ Name:           openCryptoki
 BuildRequires:  gcc-c++ libica openssl-devel pwdutils
 Summary:        An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware
 Version:        2.2.6
-Release:        3
+Release:        4
 License:        IBM Public License
 Group:          Productivity/Security
 # :pserver:anonymous@cvs.sourceforge.net:/cvsroot/opencryptoki
@@ -158,6 +158,7 @@ if [ ! -L %{_sysconfdir}/pkcs11 ] ; then
 			ln -sf %{_localstatedir}/lib/opencryptoki pkcs11
 	fi
 fi
+/sbin/ldconfig
 
 %postun
 if [ -L %{_sysconfdir}/pkcs11 ] ; then
@@ -181,6 +182,7 @@ if [ -d %{_libdir}/pkcs11 ] ; then
     [ -f libpkcs11_ica.so ] && ln -sf ./libpkcs11_ica.so PKCS11_ICA.so || true
     [ -f libpkcs11_sw.so ] && ln -sf ./libpkcs11_sw.so PKCS11_SW.so || true
 fi
+/sbin/ldconfig
 %endif
 %ifarch %openCryptoki_64bit_arch
 
@@ -188,6 +190,7 @@ fi
 # Old library name for 64bit libs were under /usr/lib/pkcs11. For migration purposes only.
 test -d /usr/lib/pkcs11 || mkdir -p /usr/lib/pkcs11
 ln -sf %{_libdir}/opencryptoki/libopencryptoki.so /usr/lib/pkcs11/PKCS11_API.so64
+/sbin/ldconfig
 %endif
 
 %files
@@ -256,6 +259,8 @@ ln -sf %{_libdir}/opencryptoki/libopencryptoki.so /usr/lib/pkcs11/PKCS11_API.so6
 %endif
 
 %changelog
+* Fri Jan 23 2009 olh@suse.de
+- run ldconfig in postinstall [bnc#417925]
 * Tue Dec 09 2008 kukuk@suse.de
 - Enable build on x86_64 [bnc#417925]
 * Thu Nov 06 2008 jjolly@suse.de