diff --git a/.gitignore b/.gitignore
index 01f01ca..abc9490 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,3 +15,4 @@ authconfig-6.1.8.tar.bz2
 /authconfig-6.2.3.tar.bz2
 /authconfig-6.2.4.tar.bz2
 /authconfig-6.2.5.tar.bz2
+/authconfig-6.2.6.tar.bz2
diff --git a/authconfig.spec b/authconfig.spec
index 37cab9f..e178d3e 100644
--- a/authconfig.spec
+++ b/authconfig.spec
@@ -1,11 +1,10 @@
 Summary: Command line tool for setting up authentication from network services
 Name: authconfig
-Version: 6.2.5
-Release: 2%{?dist}
+Version: 6.2.6
+Release: 1%{?dist}
 License: GPLv2+
 ExclusiveOS: Linux
 Group: System Environment/Base
-BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 URL: https://fedorahosted.org/authconfig
 Source: https://fedorahosted.org/releases/a/u/%{name}/%{name}-%{version}.tar.bz2
 Requires: newt-python, pam >= 0.99.10.0, python, libpwquality > 0.9
@@ -42,7 +41,6 @@ authentication schemes.
 make
 
 %install
-rm -rf $RPM_BUILD_ROOT
 make install DESTDIR=$RPM_BUILD_ROOT
 rm $RPM_BUILD_ROOT/%{_libdir}/python*/site-packages/acutilmodule.a
 rm $RPM_BUILD_ROOT/%{_libdir}/python*/site-packages/acutilmodule.la
@@ -52,9 +50,6 @@ ln -s authconfig.py $RPM_BUILD_ROOT/%{_datadir}/%{name}/authconfig-tui.py
 %find_lang %{name}
 find $RPM_BUILD_ROOT%{_datadir} -name "*.mo" | xargs ./utf8ify-mo
 
-%clean
-rm -rf $RPM_BUILD_ROOT
-
 %post gtk
 touch --no-create %{_datadir}/icons/hicolor &>/dev/null || :
 
@@ -67,9 +62,6 @@ fi
 %posttrans gtk
 gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 
-%triggerin -- authconfig <= 5.4.9
-authconfig --update --nostart >/dev/null 2>&1 || :
-
 %files -f %{name}.lang
 %defattr(-,root,root,-)
 %doc COPYING NOTES TODO README.samba3
@@ -125,8 +117,12 @@ authconfig --update --nostart >/dev/null 2>&1 || :
 %{_datadir}/icons/hicolor/256x256/apps/system-config-authentication.*
 
 %changelog
-* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 6.2.5-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
+* Thu Mar 28 2013 Tomáš Mráz <tmraz@redhat.com> - 6.2.6-1
+- add use_first_pass to pam_sss in password stack
+- more robust initialization of sssdConfig
+- check whether base DN value is a real base DN
+- use non-deprecated pam_pwquality option authtok_type= instead of type=
+- update lastlog for su
 
 * Wed Dec  5 2012 Tomas Mraz <tmraz@redhat.com> - 6.2.5-1
 - fix missing cache_credentials option when saving sssd.conf
diff --git a/sources b/sources
index 3d3c753..298143f 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-28b49146e3bfa148d0a32b9fa7c21d81  authconfig-6.2.5.tar.bz2
+8fb7fc05f824319bc2de8af492c7532c  authconfig-6.2.6.tar.bz2