diff --git a/389-ds-base.spec b/389-ds-base.spec
index 914fa98..0d07d28 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -208,6 +208,15 @@ subst 's,%_bindir/systemctl,/bin/systemctl,' %buildroot%_sbindir/*-dirsrv
 echo "Upgrading 389-ds < 1.2.10.0, manual Offline upgrade is required!
 Turn 389-ds off and make 'setup-ds -u' then"
 
+%pre
+%define _dirsrv_user dirsrv
+%define _dirsrv_group dirsrv
+%define _dirsrv_home %_localstatedir/dirsrv
+/usr/sbin/groupadd -r -f %_dirsrv_group ||:
+/usr/sbin/useradd -g %_dirsrv_group -c 'user for 389-ds-base' \
+		  -d %_dirsrv_home -s /sbin/nologin -r %_dirsrv_user \
+		  > /dev/null 2>&1 ||:
+
 %post
 %post_service %pkgname
 %post_service %pkgname-snmp