diff --git a/sssd-2.3.1.tar.gz b/sssd-2.3.1.tar.gz
deleted file mode 100644
index 86c1748..0000000
--- a/sssd-2.3.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ef8b047e6d0452a585862dffd16db725ac828e0d3fb594a8dea6d2f24a61ad17
-size 7186526
diff --git a/sssd-2.3.1.tar.gz.asc b/sssd-2.3.1.tar.gz.asc
deleted file mode 100644
index 408e594..0000000
--- a/sssd-2.3.1.tar.gz.asc
+++ /dev/null
@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCAAdFiEEGkHcZ1BfiaMwgotmr/513ehQjhIFAl8azN8ACgkQr/513ehQ
-jhImOAf/VArQnnz5rqDrYXal9brM4KnKwnb9RuVCA7JQssMRr2XALEWvTgcsNWHz
-EV8UD1Mw4SqIy6P3xckRz4dblEuI63KehpS8fudFyOVnSDPO2XkIE9hZqIrMuCvl
-f6l/sW8j4eaFGBELTXQKOl07O6ca5B9olJ7dFK2IrmhIYcVaCHyPOyGPT2t8Z3An
-DNcij2UHHup0ZkcYDiZIrWkrF5vvKHy1eWuxyvrbAA+GME7J47R3bzSWbjB+rdBJ
-/uYU5OqNLzul425BGQzDnJ92Gtfh/aj57Q0F/wpJ78Hb9KYA0G+m8mdzs0At8pv7
-VH7798VOLqeOXmUK5SLgl7oKS2ecug==
-=jv4k
------END PGP SIGNATURE-----
diff --git a/sssd-2.4.0.tar.gz b/sssd-2.4.0.tar.gz
new file mode 100644
index 0000000..02de8a8
--- /dev/null
+++ b/sssd-2.4.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:13d7eeff15e582279f70a3aad32daeb40d3749ec14947a4eded35adce7490cdd
+size 7280358
diff --git a/sssd-2.4.0.tar.gz.asc b/sssd-2.4.0.tar.gz.asc
new file mode 100644
index 0000000..3672600
--- /dev/null
+++ b/sssd-2.4.0.tar.gz.asc
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCAAdFiEEGkHcZ1BfiaMwgotmr/513ehQjhIFAl+ELlgACgkQr/513ehQ
+jhLmrQf/XCUpKoYoPm6UiUadZg7ekdju0qMLP469mwMVxp0GirHa3fNQkfnEg6OY
+CxuBbD+syRlom33jjmyOudMidmJioycaOgyogMpa+mjHezlrI5fNkX2/8FsUNcqs
+qoObYBRwE4moGMq5/Ym/dXD3OFJPRladkWtW14R+0W6otU23buSYVPPAkwZ4/sEo
+VK5Un9+I4H7AYCGDCJuvP6zPAaRao94csOSzHUPcyLEltynu9WYYWIDRfmJ+fCjC
+q3ul69DnddwiHxpnx/MqxkhlR2enHnJ6286WrIvgccjN1ytdY/LSJQkUxjCKLY/Y
+XoakWNKd+Z0oXv8/tP0OhOkP6q0qTA==
+=Cm3o
+-----END PGP SIGNATURE-----
diff --git a/sssd.changes b/sssd.changes
index e6c464e..2d71122 100644
--- a/sssd.changes
+++ b/sssd.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Mon Oct 12 13:10:26 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 2.4.0
+  * Session recording can now exclude specific users or groups
+    when scope is set to all (see exclude_users and
+    exclude_groups options).
+  * Active Directory provider now sends CLDAP pings over UDP
+    protocol to Domain Controllers in parallel to determine site
+    and forest to speed up server discovery.
+
 -------------------------------------------------------------------
 Mon Aug 10 12:55:05 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
 
diff --git a/sssd.spec b/sssd.spec
index 2ca4589..020ca01 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -18,15 +18,15 @@
 %define _buildshell /bin/bash
 
 Name:           sssd
-Version:        2.3.1
+Version:        2.4.0
 Release:        0
 Summary:        System Security Services Daemon
 License:        GPL-3.0-or-later and LGPL-3.0-or-later
 Group:          System/Daemons
 URL:            https://pagure.io/SSSD/sssd
 #Git-Clone:	https://pagure.io/SSSD/sssd
-Source:         https://github.com/SSSD/sssd/releases/download/sssd-2_3_1/%name-%version.tar.gz
-Source2:        https://github.com/SSSD/sssd/releases/download/sssd-2_3_1/%name-%version.tar.gz.asc
+Source:         https://github.com/SSSD/sssd/releases/download/sssd-2_4_0/%name-%version.tar.gz
+Source2:        https://github.com/SSSD/sssd/releases/download/sssd-2_4_0/%name-%version.tar.gz.asc
 Source3:        baselibs.conf
 Source5:        %name.keyring
 Patch1:         krb-noversion.diff