diff --git a/sssd-2.4.0.tar.gz b/sssd-2.4.0.tar.gz
deleted file mode 100644
index 02de8a8..0000000
--- a/sssd-2.4.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:13d7eeff15e582279f70a3aad32daeb40d3749ec14947a4eded35adce7490cdd
-size 7280358
diff --git a/sssd-2.4.0.tar.gz.asc b/sssd-2.4.0.tar.gz.asc
deleted file mode 100644
index 3672600..0000000
--- a/sssd-2.4.0.tar.gz.asc
+++ /dev/null
@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCAAdFiEEGkHcZ1BfiaMwgotmr/513ehQjhIFAl+ELlgACgkQr/513ehQ
-jhLmrQf/XCUpKoYoPm6UiUadZg7ekdju0qMLP469mwMVxp0GirHa3fNQkfnEg6OY
-CxuBbD+syRlom33jjmyOudMidmJioycaOgyogMpa+mjHezlrI5fNkX2/8FsUNcqs
-qoObYBRwE4moGMq5/Ym/dXD3OFJPRladkWtW14R+0W6otU23buSYVPPAkwZ4/sEo
-VK5Un9+I4H7AYCGDCJuvP6zPAaRao94csOSzHUPcyLEltynu9WYYWIDRfmJ+fCjC
-q3ul69DnddwiHxpnx/MqxkhlR2enHnJ6286WrIvgccjN1ytdY/LSJQkUxjCKLY/Y
-XoakWNKd+Z0oXv8/tP0OhOkP6q0qTA==
-=Cm3o
------END PGP SIGNATURE-----
diff --git a/sssd-2.4.1.tar.gz b/sssd-2.4.1.tar.gz
new file mode 100644
index 0000000..830c041
--- /dev/null
+++ b/sssd-2.4.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:63428d3baf7486f0d076ee106f24372738f6172086abf884e7a7320030c39141
+size 7374100
diff --git a/sssd-2.4.1.tar.gz.asc b/sssd-2.4.1.tar.gz.asc
new file mode 100644
index 0000000..71840a1
--- /dev/null
+++ b/sssd-2.4.1.tar.gz.asc
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCAAdFiEEGkHcZ1BfiaMwgotmr/513ehQjhIFAmAdOnQACgkQr/513ehQ
+jhI+3wgAv3BdMtXantDdhkdWRBQW6s4abMojspIqONR0aMUrPhy9tMnicoNz/BgV
++hFBN3phoQUSaW+5A817vRQTj7lQxHg8YnqWuk2+T+vMiiB6ZMVsb/49sGk768Ii
+oZ/D6rzByW8z/UAzco4CHZiYDNck8Qn+25eE3+/H7NbX4FdTsvt5kzbKY0gU/412
+zfckfHby2D5br6g32qvNwpRHFVJM+oEvhhx0nFVNa40v3Q4T/0GhvWLNloVNKoB9
+9sYYXnDDnFe8+h5PGuaMlFDWrRmpY+GZaZ4G8GQqwh2SXEHh8o9VdDlY4XGychfM
+XhK3+ROESutPgjCJVMmiYmNYgpTQdA==
+=f9OA
+-----END PGP SIGNATURE-----
diff --git a/sssd.changes b/sssd.changes
index 2d71122..d34ad02 100644
--- a/sssd.changes
+++ b/sssd.changes
@@ -1,3 +1,22 @@
+-------------------------------------------------------------------
+Fri Feb  5 12:56:44 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 2.4.1
+  * New PAM module pam_sss_gss for authentication using GSSAPI.
+  * case_sensitive=Preserving can now be set for trusted domains
+    with AD and IPA providers.
+  * krb5_use_subdomain_realm=True can now be used when sub-domain
+    user principal names have upnSuffixes which are not known in
+    the parent domain. SSSD will try to send the Kerberos request
+    directly to a KDC of the sub-domain.
+  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
+    output, to avoid issues with PID parsing in rsyslog
+    (BSD-style forwarder) output.
+  * Added pam_gssapi_check_upn to enforce authentication only
+    with principal that can be associated with target user.
+  * Added pam_gssapi_services to list PAM services that can
+    authenticate using GSSAPI.
+
 -------------------------------------------------------------------
 Mon Oct 12 13:10:26 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
 
diff --git a/sssd.spec b/sssd.spec
index 020ca01..908b8fa 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -18,15 +18,15 @@
 %define _buildshell /bin/bash
 
 Name:           sssd
-Version:        2.4.0
+Version:        2.4.1
 Release:        0
 Summary:        System Security Services Daemon
 License:        GPL-3.0-or-later and LGPL-3.0-or-later
 Group:          System/Daemons
 URL:            https://pagure.io/SSSD/sssd
 #Git-Clone:	https://pagure.io/SSSD/sssd
-Source:         https://github.com/SSSD/sssd/releases/download/sssd-2_4_0/%name-%version.tar.gz
-Source2:        https://github.com/SSSD/sssd/releases/download/sssd-2_4_0/%name-%version.tar.gz.asc
+Source:         https://github.com/SSSD/sssd/releases/download/2.4.1/%name-%version.tar.gz
+Source2:        https://github.com/SSSD/sssd/releases/download/2.4.1/%name-%version.tar.gz.asc
 Source3:        baselibs.conf
 Source5:        %name.keyring
 Patch1:         krb-noversion.diff
@@ -386,7 +386,7 @@ export LDFLAGS="-pie"
     --disable-ldb-version-check \
     --without-secrets \
     --without-python2-bindings
-make %{?_smp_mflags} all
+%make_build all
 
 %install
 # sss_obfuscate is compatible with both python 2 and 3
@@ -579,11 +579,13 @@ rm -f /var/lib/sss/db/*.ldb
 #
 /%_lib/libnss_sss.so.2
 /%_lib/security/pam_sss.so
+/%_lib/security/pam_sss_gss.so
 %_libdir/cifs-utils/
 %_libdir/krb5/
 %_libdir/%name/modules/sssd_krb5_localauth_plugin.so
 %_mandir/??/man8/sssd_krb5_locator_plugin.8*
 %_mandir/??/man8/pam_sss.8*
+%_mandir/??/man8/pam_sss_gss.8*
 %_mandir/man8/pam_sss.8*
 %_mandir/man8/sssd_krb5_locator_plugin.8*