Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive

Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)

Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11

Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
Resolves: rhbz#1915395 - Memory leak in the simple access provider
Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)

Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
Resolves: rhbz#1893159 - Default debug level should report all errors / failures
Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication

Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8]
Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently

Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr()
Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal
Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior

This is to bump version to allow rebuild against rebased libldb.

Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4
Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI
Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search()
Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording
Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x
Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD.
Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process
Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL
Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase)
Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page
Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals"
Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains
Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file
Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes
Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level
Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff
Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command
Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate

Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied

Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working
Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema
Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf
Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1

Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.
Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter

Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization

Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache
Fixed "requires/provides" rpmdiff warning

Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider
Resolves: rhbz#1803134 - Improve "unlock" time when user session already active

Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package
Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP
Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache
Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for
Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card"
card
Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat
Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network.
Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management
Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest
Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories
AD direct integration.
Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card
Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False
Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma