Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8]
Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8]
Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]

Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache
Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP'
Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider')
Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf
Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8]
Resolves: RHEL-10721 - very bad performance when requesting service tickets
Resolves: RHEL-19011 - Invalid handling groups from child domain
Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]

Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10

Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication
Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user

Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code
Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)

Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system

Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy
Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files
Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure
Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000]
Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization
Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working
Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides
Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'

Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release

Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9

Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)
Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket
Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7
Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name
Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable")
Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #

Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"

Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization
Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list
Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around
Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)

Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr
Resolves: rhbz#2144579 - sssd timezone issues sudonotafter
Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed

Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release

Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8

Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend