diff --git a/sssd.spec b/sssd.spec
index a20b7a1463de8f9c47cfea26a90086442a3a0e13..5525119cdd944e9a0b8420168efb5573c34d6796 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -6,61 +6,20 @@ License: GPLv3+ and LGPLv3+
 URL: https://pagure.io/SSSD/sssd/
 Source0: https://github.com/SSSD/sssd/releases/download/%{version}/%{name}-%{version}.tar.gz
 
-Requires: python3-sssd = %{version}-%{release}
+Requires: sssd-ad = %{version}-%{release}
+Requires: sssd-common = %{version}-%{release}
+Requires: sssd-ipa = %{version}-%{release}
+Requires: sssd-krb5 = %{version}-%{release}
+Requires: sssd-ldap = %{version}-%{release}
 Requires: libldb
-Requires: cyrus-sasl-gssapi%{?_isa}
 %{?systemd_requires}
 Recommends: bind-utils
-Recommends: bind-utils
 Recommends: adcli
+Recommends: sssd-proxy = %{version}-%{release}
+Recommends: logrotate
+Suggests: python3-sssdconfig = %{version}-%{release}
+Suggests: sssd-dbus = %{version}-%{release}
 
-Provides: libsss_sudo-devel = %{version}-%{release}
-Provides: sssd-common = %{version}-%{release}
-Provides: sssd-ldap = %{version}-%{release}
-Provides: sssd-krb5 = %{version}-%{release}
-Provides: sssd-krb5-common = %{version}-%{release}
-Provides: sssd-ipa = %{version}-%{release}
-Provides: sssd-ad = %{version}-%{release}
-Provides: sssd-client = %{version}-%{release}
-Provides: sssd-common-pac = %{version}-%{release}
-Provides: sssd-kcm = %{version}-%{release}
-Provides: sssd-dbus = %{version}-%{release}
-Provides: libsss_sudo = %{version}-%{release}
-Provides: sssd-proxy = %{version}-%{release}
-Provides: libsss_idmap = %{version}-%{release}
-Provides: libipa_hbac = %{version}-%{release}
-Provides: libsss_autofs = %{version}-%{release}
-Provides: libsss_nss_idmap = %{version}-%{release}
-Provides: libsss_simpleifp = %{version}-%{release}
-Provides: libsss_certmap = %{version}-%{release}
-Provides: sssd-libwbclient = %{version}-%{release}
-Provides: sssd-nfs-idmap = %{version}-%{release}
-Provides: sssd-winbind-idmap = %{version}-%{release}
-Provides: sssd-tools = %{version}-%{release}
-
-Obsoletes: libsss_sudo-devel <= 1.10.0-7%{?dist}.beta1
-Obsoletes: sssd-common < %{version}-%{release}
-Obsoletes: sssd-ldap < %{version}-%{release}
-Obsoletes: sssd-krb5 < %{version}-%{release}
-Obsoletes: sssd-krb5-common < %{version}-%{release}
-Obsoletes: sssd-ipa < %{version}-%{release}
-Obsoletes: sssd-ad < %{version}-%{release}
-Obsoletes: sssd-client < %{version}-%{release}
-Obsoletes: sssd-common-pac < %{version}-%{release}
-Obsoletes: sssd-kcm < %{version}-%{release}
-Obsoletes: sssd-dbus < %{version}-%{release}
-Obsoletes: libsss_sudo < %{version}-%{release}
-Obsoletes: sssd-proxy < %{version}-%{release}
-Obsoletes: libsss_idmap < %{version}-%{release}
-Obsoletes: libipa_hbac < %{version}-%{release}
-Obsoletes: libsss_autofs < %{version}-%{release}
-Obsoletes: libsss_nss_idmap < %{version}-%{release}
-Obsoletes: libsss_simpleifp < %{version}-%{release}
-Obsoletes: libsss_certmap < %{version}-%{release}
-Obsoletes: sssd-libwbclient < %{version}-%{release}
-Obsoletes: sssd-nfs-idmap < %{version}-%{release}
-Obsoletes: sssd-winbind-idmap < %{version}-%{release}
-Obsoletes: sssd-tools < %{version}-%{release}
 
 Requires(post): /sbin/ldconfig
 Requires(postun): /sbin/ldconfig
@@ -90,54 +49,322 @@ and authentication mechanisms such as LDAP, Kerberos or FreeIPA. It
 provides an NSS and PAM interface toward the system and a pluggable
 backend system to connect to multiple different account sources.
 
-%package devel
-Summary: Development libraries for the SSSD
+%package common
+Summary: Common files for the SSSD
 License: GPLv3+ and LGPLv3+
-Requires: dbus-devel
-Requires: sssd = %{version}-%{release}
-
-Provides: libsss_idmap-devel = %{version}-%{release}
-Provides: libipa_hbac-devel = %{version}-%{release}
-Provides: libsss_nss_idmap-devel = %{version}-%{release}
-Provides: libsss_simpleifp-devel = %{version}-%{release}
-Provides: libsss_certmap-devel = %{version}-%{release}
-Provides: sssd-libwbclient-devel = %{version}-%{release}
-
-Obsoletes: libsss_idmap-devel < %{version}-%{release}
-Obsoletes: libipa_hbac-devel < %{version}-%{release}
-Obsoletes: libsss_nss_idmap-devel < %{version}-%{release}
-Obsoletes: libsss_simpleifp-devel < %{version}-%{release}
-Obsoletes: libsss_certmap-devel < %{version}-%{release}
-Obsoletes: sssd-libwbclient-devel < %{version}-%{release}
-
-%description devel
-Development libraries for the SSSD
-
-%package -n python3-sssd
+Requires: libldb
+Requires: libtevent >= 0.11.0
+Requires: sssd-client%{?_isa} = %{version}-%{release}
+Requires: libsss_idmap = %{version}-%{release}
+Requires: libsss_certmap = %{version}-%{release}
+Recommends: libsss_sudo = %{version}-%{release}
+Recommends: libsss_autofs%{?_isa} = %{version}-%{release}
+Recommends: sssd-nfs-idmap = %{version}-%{release}
+%{?systemd_requires}
+Provides: libsss_sudo-devel = %{version}-%{release}
+Obsoletes: libsss_sudo-devel <= 1.10.0-7%{?dist}.beta1
+
+%description common
+Common files for the SSSD. The common package includes all the files needed
+to run a particular back end, however, the back ends are packaged in separate
+subpackages such as sssd-ldap.
+
+%package client
+Summary: SSSD Client libraries for NSS and PAM
+License: LGPLv3+ and LGPLv3+
+Requires: libsss_nss_idmap = %{version}-%{release}
+Requires: libsss_idmap = %{version}-%{release}
+Requires(post):  /usr/sbin/alternatives
+Requires(preun): /usr/sbin/alternatives
+
+%description client
+Provides the libraries needed by the PAM and NSS stacks to connect to the SSSD
+service.
+
+%package -n libsss_sudo
+Summary: A library to allow communication between SUDO and SSSD
+License: LGPLv3+ and LGPLv3+
+Conflicts: sssd-common < %{version}-%{release}
+
+%description -n libsss_sudo
+A utility library to allow communication between SUDO and SSSD
+
+%package -n libsss_autofs
+Summary: A library to allow communication between Autofs and SSSD
+License: LGPLv3+
+Conflicts: sssd-common < %{version}-%{release}
+
+%description -n libsss_autofs
+A utility library to allow communication between Autofs and SSSD
+
+%package tools
+Summary: Userspace tools for use with the SSSD
+License: GPLv3+
+Requires: sssd-common = %{version}-%{release}
+# required by sss_obfuscate
+Requires: python3-sss = %{version}-%{release}
+Requires: python3-sssdconfig = %{version}-%{release}
+Requires: libsss_certmap = %{version}-%{release}
+# required by sss_analyze
+Requires: python3-systemd
+Requires: python3-click
+Recommends: sssd-dbus
+
+%description tools
+Provides several administrative tools:
+    * sss_debuglevel to change the debug level on the fly
+    * sss_seed which pre-creates a user entry for use in kickstarts
+    * sss_obfuscate for generating an obfuscated LDAP password
+    * sssctl -- an sssd status and control utility
+
+%package -n python3-sssdconfig
+Summary: SSSD and IPA configuration file manipulation classes and functions
+License: GPLv3+
+BuildArch: noarch
+%{?python_provide:%python_provide python3-sssdconfig}
+
+%description -n python3-sssdconfig
+Provides python3 files for manipulation SSSD and IPA configuration files.
+
+%package -n python3-sss
 Summary: Python3 bindings for sssd
 License: LGPLv3+
-Requires: sssd = %{version}-%{release}
-Provides: python3-sss = %{version}-%{release}
-Provides: python3-sssdconfig = %{version}-%{release}
-Provides: python3-sss-murmur = %{version}-%{release}
-provides: python3-libsss_nss_idmap = %{version}-%{release}
-Provides: python3-libipa_hbac = %{version}-%{release}
-Obsoletes: python3-sss < %{version}-%{release}
-Obsoletes: python3-sssdconfig < %{version}-%{release}
-Obsoletes: python3-sss-murmur < %{version}-%{release}
-Obsoletes: python3-libipa_hbac < %{version}-%{release}
-Obsoletes: python3-libsss_nss_idmap < %{version}-%{release}
-%{?python_provide:%python_provide python3-sssd}
+Requires: sssd-common = %{version}-%{release}
 %{?python_provide:%python_provide python3-sss}
-%{?python_provide:%python_provide python3-sssdconfig}
+
+%description -n python3-sss
+Provides python3 bindings:
+    * function for retrieving list of groups user belongs to
+    * class for obfuscation of passwords
+
+%package -n python3-sss-murmur
+Summary: Python3 bindings for murmur hash function
+License: LGPLv3+
 %{?python_provide:%python_provide python3-sss-murmur}
+
+%description -n python3-sss-murmur
+Provides python3 module for calculating the murmur hash version 3
+
+%package ldap
+Summary: The LDAP back end of the SSSD
+License: GPLv3+ and LGPLv3+
+Requires: sssd-common = %{version}-%{release}
+Requires: sssd-krb5-common = %{version}-%{release}
+Requires: libsss_idmap = %{version}-%{release}
+Requires: libsss_certmap = %{version}-%{release}
+
+%description ldap
+Provides the LDAP back end that the SSSD can utilize to fetch identity data
+from and authenticate against an LDAP server.
+
+%package krb5-common
+Summary: SSSD helpers needed for Kerberos and GSSAPI authentication
+License: GPLv3+ and LGPLv3+
+Requires: cyrus-sasl-gssapi%{?_isa}
+Requires: sssd-common = %{version}-%{release}
+
+%description krb5-common
+Provides helper processes that the LDAP and Kerberos back ends can use for
+Kerberos user or host authentication.
+
+%package krb5
+Summary: The Kerberos authentication back end for the SSSD
+License: GPLv3+ and LGPLv3+
+Requires: sssd-common = %{version}-%{release}
+Requires: sssd-krb5-common = %{version}-%{release}
+
+%description krb5
+Provides the Kerberos back end that the SSSD can utilize authenticate
+against a Kerberos server.
+
+%package common-pac
+Summary: Common files needed for supporting PAC processing
+License: GPLv3+ and LGPLv3+
+Requires: sssd-common = %{version}-%{release}
+Requires: libsss_idmap = %{version}-%{release}
+
+%description common-pac
+Provides common files needed by SSSD providers such as IPA and Active Directory
+for handling Kerberos PACs.
+
+%package ipa
+Summary: The IPA back end of the SSSD
+License: GPLv3+ and LGPLv3+
+Requires: sssd-common = %{version}-%{release}
+Requires: sssd-krb5-common = %{version}-%{release}
+Requires: libipa_hbac%{?_isa} = %{version}-%{release}
+Requires: libsss_certmap = %{version}-%{release}
+Recommends: bind-utils
+Requires: sssd-common-pac = %{version}-%{release}
+Requires: libsss_idmap = %{version}-%{release}
+
+%description ipa
+Provides the IPA back end that the SSSD can utilize to fetch identity data
+from and authenticate against an IPA server.
+
+%package ad
+Summary: The AD back end of the SSSD
+License: GPLv3+ and LGPLv3+
+Requires: sssd-common = %{version}-%{release}
+Requires: sssd-krb5-common = %{version}-%{release}
+Requires: sssd-common-pac = %{version}-%{release}
+Requires: libsss_idmap = %{version}-%{release}
+Requires: libsss_certmap = %{version}-%{release}
+Recommends: bind-utils
+Recommends: adcli
+Suggests: sssd-winbind-idmap = %{version}-%{release}
+
+%description ad
+Provides the Active Directory back end that the SSSD can utilize to fetch
+identity data from and authenticate against an Active Directory server.
+
+%package proxy
+Summary: The proxy back end of the SSSD
+License: GPLv3+
+Requires: sssd-common = %{version}-%{release}
+
+%description proxy
+Provides the proxy back end which can be used to wrap an existing NSS and/or
+PAM modules to leverage SSSD caching.
+
+%package -n libsss_idmap
+Summary: FreeIPA Idmap library
+License: LGPLv3+ and LGPLv3+
+
+%description -n libsss_idmap
+Utility library to convert SIDs to Unix uids and gids
+
+%package -n libsss_idmap-devel
+Summary: FreeIPA Idmap library
+License: LGPLv3+
+Requires: libsss_idmap = %{version}-%{release}
+
+%description -n libsss_idmap-devel
+Utility library to SIDs to Unix uids and gids
+
+%package -n libipa_hbac
+Summary: FreeIPA HBAC Evaluator library
+License: LGPLv3+ and LGPLv3+
+
+%description -n libipa_hbac
+Utility library to validate FreeIPA HBAC rules for authorization requests
+
+%package -n libipa_hbac-devel
+Summary: FreeIPA HBAC Evaluator library
+License: LGPLv3+
+Requires: libipa_hbac = %{version}-%{release}
+
+%description -n libipa_hbac-devel
+Utility library to validate FreeIPA HBAC rules for authorization requests
+
+%package -n python3-libipa_hbac
+Summary: Python3 bindings for the FreeIPA HBAC Evaluator library
+License: LGPLv3+
+Requires: libipa_hbac = %{version}-%{release}
 %{?python_provide:%python_provide python3-libipa_hbac}
+
+%description -n python3-libipa_hbac
+The python3-libipa_hbac contains the bindings so that libipa_hbac can be
+used by Python applications.
+
+%package -n libsss_nss_idmap
+Summary: Library for SID and certificate based lookups
+License: LGPLv3+ and LGPLv3+
+
+%description -n libsss_nss_idmap
+Utility library for SID and certificate based lookups
+
+%package -n libsss_nss_idmap-devel
+Summary: Library for SID and certificate based lookups
+License: LGPLv3+
+Requires: libsss_nss_idmap = %{version}-%{release}
+
+%description -n libsss_nss_idmap-devel
+Utility library for SID and certificate based lookups
+
+%package -n python3-libsss_nss_idmap
+Summary: Python3 bindings for libsss_nss_idmap
+License: LGPLv3+
+Requires: libsss_nss_idmap = %{version}-%{release}
 %{?python_provide:%python_provide python3-libsss_nss_idmap}
 
-%description -n python3-sssd
-Python3 bindings for sssd
+%description -n python3-libsss_nss_idmap
+The python3-libsss_nss_idmap contains the bindings so that libsss_nss_idmap can
+be used by Python applications.
 
-%package_help
+%package dbus
+Summary: The D-Bus responder of the SSSD
+License: GPLv3+
+Requires: sssd-common = %{version}-%{release}
+%{?systemd_requires}
+
+%description dbus
+Provides the D-Bus responder of the SSSD, called the InfoPipe, that allows
+the information from the SSSD to be transmitted over the system bus.
+
+%package -n libsss_simpleifp
+Summary: The SSSD D-Bus responder helper library
+License: GPLv3+
+Requires: sssd-dbus = %{version}-%{release}
+
+%description -n libsss_simpleifp
+Provides library that simplifies D-Bus API for the SSSD InfoPipe responder.
+
+%package -n libsss_simpleifp-devel
+Summary: The SSSD D-Bus responder helper library
+License: GPLv3+
+Requires: dbus-devel
+Requires: libsss_simpleifp = %{version}-%{release}
+
+%description -n libsss_simpleifp-devel
+Provides library that simplifies D-Bus API for the SSSD InfoPipe responder.
+
+%package winbind-idmap
+Summary: SSSD's idmap_sss Backend for Winbind
+License: GPLv3+ and LGPLv3+
+Requires: libsss_nss_idmap = %{version}-%{release}
+Requires: libsss_idmap = %{version}-%{release}
+Conflicts: sssd-common < %{version}-%{release}
+
+%description winbind-idmap
+The idmap_sss module provides a way for Winbind to call SSSD to map UIDs/GIDs
+and SIDs.
+
+%package nfs-idmap
+Summary: SSSD plug-in for NFSv4 rpc.idmapd
+License: GPLv3+
+Conflicts: sssd-common < %{version}-%{release}
+
+%description nfs-idmap
+The libnfsidmap sssd module provides a way for rpc.idmapd to call SSSD to map
+UIDs/GIDs to names and vice versa. It can be also used for mapping principal
+(user) name to IDs(UID or GID) or to obtain groups which user are member of.
+
+%package -n libsss_certmap
+Summary: SSSD Certificate Mapping Library
+License: LGPLv3+ and LGPLv3+
+Conflicts: sssd-common < %{version}-%{release}
+
+%description -n libsss_certmap
+Library to map certificates to users based on rules
+
+%package -n libsss_certmap-devel
+Summary: SSSD Certificate Mapping Library
+License: LGPLv3+
+Requires: libsss_certmap = %{version}-%{release}
+
+%description -n libsss_certmap-devel
+Library to map certificates to users based on rules
+
+%package kcm
+Summary: An implementation of a Kerberos KCM server
+License: GPLv3+
+Requires: sssd-common = %{version}-%{release}
+%{?systemd_requires}
+
+%description kcm
+An implementation of a Kerberos KCM server. Use this package if you want to
+use the KCM: Kerberos credentials cache.
 
 %prep
 %autosetup -p1
@@ -206,22 +433,21 @@ cp $RPM_BUILD_ROOT/%{_datadir}/sssd/krb5-snippets/enable_sssd_conf_dir \
 
 mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/cifs-utils
 
+# Suppress developer-only documentation
+rm -Rf ${RPM_BUILD_ROOT}/%{_docdir}/%{name}
 %delete_la
 
 for file in `ls $RPM_BUILD_ROOT/%{python3_sitelib}/*.egg-info 2> /dev/null`
 do
-    echo %{python3_sitelib}/`basename $file` >> python3_sssd.lang
+    echo %{python3_sitelib}/`basename $file` >> python3_sssdconfig.lang
 done
 
 touch sssd.lang
 
 chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/ldap_child
 chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/krb5_child
-
 chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/sssd_pac
-
 chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_krb5.so
-
 chrpath -d $RPM_BUILD_ROOT%{ldb_modulesdir}/memberof.so
 chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_files.so
 chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_simple.so
@@ -253,37 +479,92 @@ chrpath -d $RPM_BUILD_ROOT%{_sbindir}/sssctl
 chrpath -d $RPM_BUILD_ROOT%{_sbindir}/sss_override
 chrpath -d $RPM_BUILD_ROOT%{_sbindir}/sss_seed
 chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/sssd_ifp
-
 chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_ipa.so
 chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/selinux_child
-
 chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/sssd_kcm
-
 chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_ldap.so
-
 chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_ad.so
 chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/gpo_child
-
 chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/proxy_child
 chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_proxy.so
 chrpath -d $RPM_BUILD_ROOT%{python3_sitearch}/pysss.so
 mkdir -p $RPM_BUILD_ROOT/etc/ld.so.conf.d
 echo "/usr/lib64/sssd" > $RPM_BUILD_ROOT/etc/ld.so.conf.d/%{name}-%{_arch}.conf
 
+touch sssd.lang
+for subpackage in sssd_ldap sssd_krb5 sssd_ipa sssd_ad sssd_proxy sssd_tools \
+                  sssd_client sssd_dbus sssd_nfs_idmap sssd_winbind_idmap \
+                  libsss_certmap sssd_kcm
+do
+    touch $subpackage.lang
+done
+
 for man in `find $RPM_BUILD_ROOT/%{_mandir}/??/man?/ -type f | sed -e "s#$RPM_BUILD_ROOT/%{_mandir}/##"`
 do
     lang=`echo $man | cut -c 1-2`
     case `basename $man` in
+        sss_cache*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
+            ;;
+        sss_ssh*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
+            ;;
+        sss_rpcidmapd*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_nfs_idmap.lang
+            ;;
+        sss_*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_tools.lang
+            ;;
+        sssctl*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_tools.lang
+            ;;
+        sssd_krb5_*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_client.lang
+            ;;
+        pam_sss*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_client.lang
+            ;;
+        sssd-ldap*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ldap.lang
+            ;;
+        sssd-krb5*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_krb5.lang
+            ;;
+        sssd-ipa*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ipa.lang
+            ;;
+        sssd-ad*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ad.lang
+            ;;
+        sssd-proxy*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_proxy.lang
+            ;;
+        sssd-ifp*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_dbus.lang
+            ;;
+        sssd-kcm*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_kcm.lang
+            ;;
+        idmap_sss*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_winbind_idmap.lang
+            ;;
+        sss-certmap*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> libsss_certmap.lang
+            ;;
         *)
             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
             ;;
     esac
 done
 
-%files -f sssd.lang
+
+%files
+%license COPYING
+
+%files common -f sssd.lang
 %license COPYING
-%license src/sss_client/COPYING.LESSER
 %doc src/examples/sssd-example.conf
+%config(noreplace) /etc/ld.so.conf.d/*
 %{_sbindir}/sssd
 %{_unitdir}/sssd.service
 %{_unitdir}/sssd-autofs.socket
@@ -311,9 +592,11 @@ done
 %{_libexecdir}/sssd/sssd_check_socket_activated_responders
 
 %dir %{_libdir}/%{name}
+# The files provider is intentionally packaged in -common
 %{_libdir}/%{name}/libsss_files.so
 %{_libdir}/%{name}/libsss_simple.so
 
+#Internal shared libraries
 %{_libdir}/%{name}/libsss_child.so
 %{_libdir}/%{name}/libsss_crypt.so
 %{_libdir}/%{name}/libsss_cert.so
@@ -355,7 +638,6 @@ done
 %attr(0600,root,root) %config(noreplace) %{_sysconfdir}/sssd/sssd.conf
 %dir %{_sysconfdir}/logrotate.d
 %config(noreplace) %{_sysconfdir}/logrotate.d/sssd
-%config(noreplace) /etc/ld.so.conf.d/*
 %dir %{_sysconfdir}/rwtab.d
 %config(noreplace) %{_sysconfdir}/rwtab.d/sssd
 %dir %{_datadir}/sssd
@@ -364,8 +646,15 @@ done
 %{_libdir}/%{name}/conf/sssd.conf
 
 %{_datadir}/sssd/cfg_rules.ini
-%{_datadir}/sssd/sssd.api.conf
-%{_datadir}/sssd/sssd.api.d
+%{_mandir}/man1/sss_ssh_authorizedkeys.1*
+%{_mandir}/man1/sss_ssh_knownhostsproxy.1*
+%{_mandir}/man5/sssd.conf.5*
+%{_mandir}/man5/sssd-files.5*
+%{_mandir}/man5/sssd-simple.5*
+%{_mandir}/man5/sssd-sudo.5*
+%{_mandir}/man5/sssd-session-recording.5*
+%{_mandir}/man8/sssd.8*
+%{_mandir}/man8/sss_cache.8*
 %dir %{_datadir}/sssd/systemtap
 %{_datadir}/sssd/systemtap/id_perf.stp
 %{_datadir}/sssd/systemtap/nested_group_perf.stp
@@ -375,6 +664,7 @@ done
 %dir %{_datadir}/systemtap/tapset
 %{_datadir}/systemtap/tapset/sssd.stp
 %{_datadir}/systemtap/tapset/sssd_functions.stp
+%{_mandir}/man5/sssd-systemtap.5*
 
 %{_sbindir}/sss_obfuscate
 %{_sbindir}/sss_override
@@ -383,55 +673,116 @@ done
 %{_sbindir}/sssctl
 %{_libexecdir}/sssd/sss_analyze
 
+%files krb5-common
+%license COPYING
 %attr(755,root,root) %dir %{_localstatedir}/lib/sss/pubconf/krb5.include.d
 %{_libexecdir}/sssd/ldap_child
 %{_libexecdir}/sssd/krb5_child
+
+%files krb5 -f sssd_krb5.lang
+%license COPYING
 %{_libdir}/%{name}/libsss_krb5.so
-%{_libdir}/%{name}/libsss_ldap.so
+%{_mandir}/man5/sssd-krb5.5*
 
+%files common-pac
+%license COPYING
+%{_libexecdir}/sssd/sssd_pac
+
+%files ipa -f sssd_ipa.lang
+%license COPYING
 %attr(700,root,root) %dir %{_localstatedir}/lib/sss/keytabs
 %{_libdir}/%{name}/libsss_ipa.so
 %{_libexecdir}/sssd/selinux_child
+%{_mandir}/man5/sssd-ipa.5*
+
+%files ad -f sssd_ad.lang
+%license COPYING
 %{_libdir}/%{name}/libsss_ad.so
 %{_libexecdir}/sssd/gpo_child
-%{_libexecdir}/sssd/sssd_pac
+%{_mandir}/man5/sssd-ad.5*
+
+%files proxy
+%license COPYING
+%{_libexecdir}/sssd/proxy_child
+%{_libdir}/%{name}/libsss_proxy.so
+
+%files dbus -f sssd_dbus.lang
+%license COPYING
+%{_mandir}/man5/sssd-ifp.5*
+%{_libexecdir}/sssd/sssd_ifp
+%{_unitdir}/sssd-ifp.service
+%{_sysconfdir}/dbus-1/system.d/org.freedesktop.sssd.infopipe.conf
+%{_datadir}/dbus-1/system-services/org.freedesktop.sssd.infopipe.service
+
+%files -n libsss_simpleifp
+%{_libdir}/libsss_simpleifp.so.*
+
+%files -n libsss_simpleifp-devel
+%doc sss_simpleifp_doc/html
+%{_includedir}/sss_sifp.h
+%{_includedir}/sss_sifp_dbus.h
+%{_libdir}/libsss_simpleifp.so
+%{_libdir}/pkgconfig/sss_simpleifp.pc
 
+%files client -f sssd_client.lang
+%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
 %{_libdir}/libnss_sss.so.2
 %{_libdir}/security/pam_sss.so
+%{_libdir}/security/pam_sss_gss.so
 %{_libdir}/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.so
 %{_libdir}/krb5/plugins/authdata/sssd_pac_plugin.so
 %dir %{_libdir}/cifs-utils
 %{_libdir}/cifs-utils/cifs_idmap_sss.so
 %dir %{_sysconfdir}/cifs-utils
 %ghost %{_sysconfdir}/cifs-utils/idmap-plugin
+%dir %{_libdir}/%{name}
 %dir %{_libdir}/%{name}/modules
 %{_libdir}/%{name}/modules/sssd_krb5_localauth_plugin.so
+%{_mandir}/man8/pam_sss.8*
+%{_mandir}/man8/pam_sss_gss.8*
+%{_mandir}/man8/sssd_krb5_locator_plugin.8*
 
-%{_libexecdir}/sssd/sssd_kcm
-%config(noreplace) %{_sysconfdir}/krb5.conf.d/kcm_default_ccache
-%dir %{_datadir}/sssd-kcm
-%{_datadir}/sssd-kcm/kcm_default_ccache
-%{_unitdir}/sssd-kcm.socket
-%{_unitdir}/sssd-kcm.service
+%files -n libsss_sudo
+%license src/sss_client/COPYING
+%{_libdir}/libsss_sudo.so*
 
-%{_libexecdir}/sssd/sssd_ifp
-%{_unitdir}/sssd-ifp.service
-%{_sysconfdir}/dbus-1/system.d/org.freedesktop.sssd.infopipe.conf
-%{_datadir}/dbus-1/system-services/org.freedesktop.sssd.infopipe.service
+%files -n libsss_autofs
+%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
+%dir %{_libdir}/%{name}/modules
+%{_libdir}/%{name}/modules/libsss_autofs.so
 
-%{_libdir}/libsss_sudo.so*
-%{_libexecdir}/sssd/proxy_child
-%{_libdir}/%{name}/libsss_proxy.so
+%files tools -f sssd_tools.lang
+%license COPYING
+%{_sbindir}/sss_obfuscate
+%{_sbindir}/sss_override
+%{_sbindir}/sss_debuglevel
+%{_sbindir}/sss_seed
+%{_sbindir}/sssctl
+%{python3_sitelib}/sssd/
+%{_mandir}/man8/sss_obfuscate.8*
+%{_mandir}/man8/sss_override.8*
+%{_mandir}/man8/sss_debuglevel.8*
+%{_mandir}/man8/sss_seed.8*
+%{_mandir}/man8/sssctl.8*
+
+%files -n python3-sssdconfig -f python3_sssdconfig.lang
+%dir %{python3_sitelib}/SSSDConfig
+%{python3_sitelib}/SSSDConfig/*.py*
+%dir %{python3_sitelib}/SSSDConfig/__pycache__
+%{python3_sitelib}/SSSDConfig/__pycache__/*.py*
+%dir %{_datadir}/sssd
+%{_datadir}/sssd/sssd.api.conf
+%{_datadir}/sssd/sssd.api.d
+
+%files -n python3-sss
+%{python3_sitearch}/pysss.so
+
+%files -n python3-sss-murmur
+%{python3_sitearch}/pysss_murmur.so
+
+%files -n libsss_idmap
+%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
 %{_libdir}/libsss_idmap.so.*
-%{_libdir}/libipa_hbac.so.*
-%{_libdir}/%{name}/modules/libsss_autofs.so
-%{_libdir}/libsss_nss_idmap.so.*
-%{_libdir}/libsss_simpleifp.so.*
-%{_libdir}/libsss_certmap.so.*
-%{_libdir}/libnfsidmap/sss.so
-%dir %{_libdir}/samba/idmap
-%{_libdir}/samba/idmap/sss.so
-%{_libdir}/security/pam_sss_gss.so
 
 %{_libexecdir}/sssd/oidc_child
 %{_libdir}/%{name}/modules/sssd_krb5_idp_plugin.so
@@ -445,38 +796,63 @@ done
 %{_includedir}/sss_idmap.h
 %{_libdir}/libsss_idmap.so
 %{_libdir}/pkgconfig/sss_idmap.pc
+
+%files -n libipa_hbac
+%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
+%{_libdir}/libipa_hbac.so.*
+
+%files -n libipa_hbac-devel
+%doc hbac_doc/html
 %{_includedir}/ipa_hbac.h
 %{_libdir}/libipa_hbac.so
 %{_libdir}/pkgconfig/ipa_hbac.pc
+
+%files -n libsss_nss_idmap
+%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
+%{_libdir}/libsss_nss_idmap.so.*
+
+%files -n libsss_nss_idmap-devel
+%doc nss_idmap_doc/html
 %{_includedir}/sss_nss_idmap.h
 %{_libdir}/libsss_nss_idmap.so
 %{_libdir}/pkgconfig/sss_nss_idmap.pc
-%{_includedir}/sss_sifp.h
-%{_includedir}/sss_sifp_dbus.h
-%{_libdir}/libsss_simpleifp.so
-%{_libdir}/pkgconfig/sss_simpleifp.pc
-%{_includedir}/sss_certmap.h
-%{_libdir}/libsss_certmap.so
-%{_libdir}/pkgconfig/sss_certmap.pc
 
-%files -n python3-sssd -f python3_sssd.lang
-%dir %{python3_sitelib}/SSSDConfig
-%{python3_sitelib}/SSSDConfig/*.py*
-%dir %{python3_sitelib}/SSSDConfig/__pycache__
-%{python3_sitelib}/SSSDConfig/__pycache__/*.py*
-%{python3_sitelib}/sssd
-%{python3_sitearch}/pysss.so
-%{python3_sitearch}/pysss_murmur.so
+%files -n python3-libsss_nss_idmap
 %{python3_sitearch}/pysss_nss_idmap.so
+
+%files -n python3-libipa_hbac
 %{python3_sitearch}/pyhbac.so
 
-%files help
-%doc %{_pkgdocdir}
-%{_mandir}/man1/*
-%{_mandir}/man5/*
-%{_mandir}/man8/*
+%files winbind-idmap -f sssd_winbind_idmap.lang
+%dir %{_libdir}/samba/idmap
+%{_libdir}/samba/idmap/sss.so
+%{_mandir}/man8/idmap_sss.8*
+
+%files nfs-idmap -f sssd_nfs_idmap.lang
+%{_mandir}/man5/sss_rpcidmapd.5*
+%{_libdir}/libnfsidmap/sss.so
+
+%files -n libsss_certmap -f libsss_certmap.lang
+%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
+%{_libdir}/libsss_certmap.so.*
+%{_mandir}/man5/sss-certmap.5*
+
+%files -n libsss_certmap-devel
+%doc certmap_doc/html
+%{_includedir}/sss_certmap.h
+%{_libdir}/libsss_certmap.so
+%{_libdir}/pkgconfig/sss_certmap.pc
+
+%files kcm -f sssd_kcm.lang
+%{_libexecdir}/sssd/sssd_kcm
+%config(noreplace) %{_sysconfdir}/krb5.conf.d/kcm_default_ccache
+%dir %{_datadir}/sssd-kcm
+%{_datadir}/sssd-kcm/kcm_default_ccache
+%{_unitdir}/sssd-kcm.socket
+%{_unitdir}/sssd-kcm.service
+%{_mandir}/man8/sssd-kcm.8*
 
-%post
+%post common
 %systemd_post sssd.service
 %systemd_post sssd-autofs.socket
 %systemd_post sssd-nss.socket
@@ -490,7 +866,7 @@ done
 /sbin/ldconfig
 /usr/sbin/alternatives --install /etc/cifs-utils/idmap-plugin cifs-idmap-plugin %{_libdir}/cifs-utils/cifs_idmap_sss.so 20
 
-%preun
+%preun common
 %systemd_preun sssd.service
 %systemd_preun sssd-autofs.socket
 %systemd_preun sssd-nss.socket
@@ -505,7 +881,7 @@ if [ $1 -eq 0 ] ; then
         /usr/sbin/alternatives --remove cifs-idmap-plugin %{_libdir}/cifs-utils/cifs_idmap_sss.so
 fi
 
-%postun
+%postun common
 %systemd_postun_with_restart sssd-autofs.socket
 %systemd_postun_with_restart sssd-nss.socket
 %systemd_postun_with_restart sssd-pac.socket
@@ -525,9 +901,36 @@ fi
 %systemd_postun sssd-ssh.service
 %systemd_postun sssd-sudo.service
 
+%post dbus
+%systemd_post sssd-ifp.service
+
+%preun dbus
+%systemd_preun sssd-ifp.service
+
+%postun dbus
+%systemd_postun_with_restart sssd-ifp.service
+
+%post kcm
+%systemd_post sssd-kcm.socket
+
+%preun kcm
+%systemd_preun sssd-kcm.socket
+
+%postun kcm
+%systemd_postun_with_restart sssd-kcm.socket
+%systemd_postun_with_restart sssd-kcm.service
+
 /sbin/ldconfig
 
-%posttrans
+%post client
+/usr/sbin/alternatives --install /etc/cifs-utils/idmap-plugin cifs-idmap-plugin %{_libdir}/cifs-utils/cifs_idmap_sss.so 20
+
+%preun client
+if [ $1 -eq 0 ] ; then
+        /usr/sbin/alternatives --remove cifs-idmap-plugin %{_libdir}/cifs-utils/cifs_idmap_sss.so
+fi
+
+%posttrans common
 %systemd_postun_with_restart sssd.service
 
 %changelog