diff --git a/debian/changelog b/debian/changelog
index 7f7b35d98..e22047ebd 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -4,6 +4,7 @@ freeipa (4.6.3-2) UNRELEASED; urgency=medium
   * client.dirs: Add /var/lib/ipa-client/pki.
   * server.post*: Enable session, session_cookie apache modules.
   * control: Add sssd-dbus to server Depends.
+  * fix-httpd-group.diff: Fix apache group for Debian.
 
  -- Timo Aaltonen <tjaalton@debian.org>  Sun, 04 Feb 2018 00:25:41 +0200
 
diff --git a/debian/patches/fix-httpd-group.diff b/debian/patches/fix-httpd-group.diff
new file mode 100644
index 000000000..6e619cfa2
--- /dev/null
+++ b/debian/patches/fix-httpd-group.diff
@@ -0,0 +1,10 @@
+--- a/ipaplatform/debian/constants.py
++++ b/ipaplatform/debian/constants.py
+@@ -12,6 +12,7 @@ from ipaplatform.base.constants import B
+ 
+ class DebianConstantsNamespace(BaseConstantsNamespace):
+     HTTPD_USER = "www-data"
++    HTTPD_GROUP = "www-data"
+     NAMED_USER = "bind"
+     NAMED_GROUP = "bind"
+     # ntpd init variable used for daemon options
diff --git a/debian/patches/series b/debian/patches/series
index 16134efa0..5c0c76209 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -10,3 +10,4 @@ fix-replicainstall.diff
 create-sysconfig-ods.diff
 fix-named-conf-template.diff
 fix-opendnssec-setup.diff
+fix-httpd-group.diff