Related: RHEL-59788 - Rebase Samba to the latest 4.21.x release

Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
Resolves: RHEL-50912 - possible regression of rhbz#2196521

Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4

Resolves: RHEL-40742 - passkey_child with wrong owner

Resolves: RHEL-40742 - passkey_child with wrong owner
Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
Resolves: RHEL-40570 - GPO access the wrong memory location

Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
Resolves: RHEL-30142 - sssd_pac is crashing
Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
Resolves: RHEL-29454 - NULL dereference in inotify handling
Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username

Relates: RHEL-33645 - Rebase Samba to the latest 4.20.x release

Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]

Resolves: RHEL-28161 - Passkey cannot fall back to password

Resolves: RHEL-28161 - Passkey cannot fall back to password

Resolves: RHEL-22340 - socket leak
Resolves: RHEL-28161 - Passkey cannot fall back to password

Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address.
Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities

Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]

Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4

Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
Resolves: RHEL-14427 - Expected cn in RDN, got uid
Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
Resolves: RHEL-2319 - Passkey authentication for centrally managed users
Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)

Resolves: RHEL-2319 - Passkey authentication for centrally managed users