diff --git a/debian/changelog b/debian/changelog
index fd0208def..ffa01bd4b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -29,6 +29,7 @@ freeipa (4.6.2-1) UNRELEASED; urgency=medium
   * rules: Migrate to dh_missing.
   * Drop server tmpfile, ship upstream one, and create ipaapi/kdcproxy
     users/groups on install and add www-data to ipaapi group.
+  * control: Add python-sss to python-ipaserver depends.
 
  -- Timo Aaltonen <tjaalton@debian.org>  Tue, 14 Mar 2017 16:55:45 +0200
 
diff --git a/debian/control b/debian/control
index 6172bae56..67d251479 100644
--- a/debian/control
+++ b/debian/control
@@ -329,6 +329,7 @@ Depends:
  python-ldap (>= 2.4.22),
  python-libsss-nss-idmap,
  python-pyasn1,
+ python-sss,
  samba-common,
  zip,
  ${misc:Depends},