diff --git a/debian/changelog b/debian/changelog
index b6d002e82..ca2c8dcfc 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -10,6 +10,7 @@ freeipa (4.5.0-1) UNRELEASED; urgency=medium
     - Refresh patches: fix-dnssec-services.diff,
       fix-ipa-conf.diff, fix-replicainstall.diff
   * control et al: Memcached is not used anymore.
+  * control, server.install: Depend on gssproxy.
 
  -- Timo Aaltonen <tjaalton@debian.org>  Tue, 14 Mar 2017 16:55:45 +0200
 
diff --git a/debian/control b/debian/control
index a67ffc61e..2fa16f45c 100644
--- a/debian/control
+++ b/debian/control
@@ -79,6 +79,7 @@ Depends:
  freeipa-admintools (= ${source:Version}),
  freeipa-client (= ${binary:Version}),
  freeipa-common (= ${source:Version}),
+ gssproxy (>= 0.7.0),
  krb5-admin-server,
  krb5-kdc,
  krb5-kdc-ldap,
diff --git a/debian/freeipa-server.install b/debian/freeipa-server.install
index 4cbc07346..c4a2143e9 100644
--- a/debian/freeipa-server.install
+++ b/debian/freeipa-server.install
@@ -95,5 +95,6 @@ usr/share/man/man1/ipa-winsync-migrate.1*
 usr/share/man/man8/ipa-upgradeconfig.8*
 usr/share/man/man8/ipactl.8*
 var/lib/ipa/pki-ca
+var/lib/ipa/gssproxy
 var/lib/ipa/sysrestore
 var/lib/ipa/sysupgrade