diff --git a/openldap.conf b/openldap.conf
new file mode 100644
index 0000000..579c6d0
--- /dev/null
+++ b/openldap.conf
@@ -0,0 +1,3 @@
+# openldap needs a directory in /var/lib/:
+d /var/lib/ldap 0750 ldap ldap -
+L /var/lib/ldap/DB_CONFIG - - - - ../../../usr/lib/openldap/
diff --git a/openldap2.changes b/openldap2.changes
index 13d375d..aa4aa8d 100644
--- a/openldap2.changes
+++ b/openldap2.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Nov  8 15:25:08 UTC 2018 - varkoly@suse.com
+
+- Bug 1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update) 
+
 -------------------------------------------------------------------
 Fri Oct 26 14:58:41 UTC 2018 - Michael Ströder <michael@stroeder.com>
 
diff --git a/openldap2.spec b/openldap2.spec
index f104c04..c13d542 100644
--- a/openldap2.spec
+++ b/openldap2.spec
@@ -56,6 +56,7 @@ Source14:       slapd.service
 Source15:       SuSEfirewall2.openldap
 Source16:       sysconfig.openldap
 Source17:       openldap_update_modules_path.sh
+Source18:       openldap.conf
 Patch1:         0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
 Patch3:         0003-LDAPI-socket-location.dif
 Patch5:         0005-pie-compile.dif
@@ -373,6 +374,8 @@ chmod a+x ${RPM_BUILD_ROOT}/%{_libdir}/liblber.so*
 chmod a+x ${RPM_BUILD_ROOT}/%{_libdir}/libldap_r.so*
 install -m 755 %{SOURCE6} ${RPM_BUILD_ROOT}/usr/sbin/schema2ldif
 install -m 755 %{SOURCE17} ${RPM_BUILD_ROOT}/usr/sbin
+mkdir -p  ${RPM_BUILD_ROOT}/usr/lib/tmpfiles.d/
+install -m 644 %{SOURCE18} ${RPM_BUILD_ROOT}/usr/lib/tmpfiles.d/
 
 # Install ppolicy check module
 make -C contrib/slapd-modules/ppolicy-check-password STRIP="" "DESTDIR=${RPM_BUILD_ROOT}" "sysconfdir=%{_sysconfdir}/openldap" "libdir=%{_libdir}" "libexecdir=%{_libexecdir}" install
@@ -394,15 +397,15 @@ install -m 644 *.schema ${RPM_BUILD_ROOT}%{_sysconfdir}/openldap/schema
 install -m 644 %{SOURCE1} ${RPM_BUILD_ROOT}%{_sysconfdir}/openldap
 install -m 644 %{SOURCE2} ${RPM_BUILD_ROOT}%{_sysconfdir}/openldap
 install -m 644 %{SOURCE12} ${RPM_BUILD_ROOT}%{_sysconfdir}/openldap
-# Install default database optimisations
-install -m 644 %{SOURCE3} ${RPM_BUILD_ROOT}/var/lib/ldap/DB_CONFIG
-install -m 644 ${RPM_BUILD_ROOT}/etc/openldap/DB_CONFIG.example ${RPM_BUILD_ROOT}/var/lib/ldap/DB_CONFIG.example
 install -d ${RPM_BUILD_ROOT}/etc/sysconfig/SuSEfirewall2.d/services/
 install -m 644 %{SOURCE15} ${RPM_BUILD_ROOT}/etc/sysconfig/SuSEfirewall2.d/services/openldap
 find doc/guide '(' ! -name *.html -a ! -name *.gif -a ! -name *.png -a ! -type d ')' -delete
 rm -rf doc/guide/release
 
 %define DOCDIR %{_defaultdocdir}/%{name}
+# Install default database optimisation
+install -m 644 %{SOURCE3} ${RPM_BUILD_ROOT}/%{DOCDIR}/
+install -m 644 ${RPM_BUILD_ROOT}/etc/openldap/DB_CONFIG.example ${RPM_BUILD_ROOT}/%{DOCDIR}/
 install -d ${RPM_BUILD_ROOT}/%{DOCDIR}/adminguide \
            ${RPM_BUILD_ROOT}/%{DOCDIR}/images \
            ${RPM_BUILD_ROOT}/%{DOCDIR}/drafts
@@ -458,6 +461,7 @@ fi
 %service_add_post slapd.service
 
 %post -n libldap-2_4-2 -p /sbin/ldconfig
+%tmpfiles_create openldap.conf
 
 %postun -n libldap-2_4-2 -p /sbin/ldconfig
 
@@ -478,7 +482,6 @@ fi
 %config %attr(640, root, ldap) %{_sysconfdir}/openldap/slapd.conf.default
 %config %attr(640, root, ldap) %{_sysconfdir}/openldap/slapd.conf.example
 %config(noreplace) %attr(640, ldap, ldap) /var/lib/ldap/DB_CONFIG
-%config /var/lib/ldap/DB_CONFIG.example
 %dir %{_libdir}/openldap
 %dir %{_libexecdir}/openldap
 %dir %{_sysconfdir}/sasl2
@@ -519,6 +522,7 @@ fi
 %{_libdir}/slapd
 %{_libexecdir}/openldap/start
 %{_unitdir}/slapd.service
+/usr/lib/tmpfiles.d/%{name}.conf
 %dir %attr(0750, ldap, ldap) /var/lib/ldap
 %ghost %attr(0750, ldap, ldap) %{_rundir}
 %doc %{_mandir}/man8/sl*