diff --git a/_service b/_service
index 927747c..0a82751 100644
--- a/_service
+++ b/_service
@@ -3,7 +3,7 @@
https://github.com/kanidm/kanidm.git
@PARENT_TAG@~git@TAG_OFFSET@.%h
git
- 1.1.0-rc.15
+ 1.1.0-rc.16
v*
v(\d+\.\d+\.\d+)-([a-z]+)\.(\d+)
\1~\2\3
diff --git a/_servicedata b/_servicedata
index da33330..69362ea 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
https://github.com/kanidm/kanidm.git
- 122b6afd878e92c1b68b2d8dc594c099f2db0af0
\ No newline at end of file
+ a917291ecf5b3b645d8c922d327d835198f71e94
\ No newline at end of file
diff --git a/kanidm-1.1.0~rc15~git8.122b6af.tar.zst b/kanidm-1.1.0~rc15~git8.122b6af.tar.zst
deleted file mode 100644
index 4a47740..0000000
--- a/kanidm-1.1.0~rc15~git8.122b6af.tar.zst
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:e472eb87ba915db98a75f6f660cbab200fe1695e84c725b5c84c540c418012a2
-size 10001899
diff --git a/kanidm-1.1.0~rc16~git1.a917291.tar.zst b/kanidm-1.1.0~rc16~git1.a917291.tar.zst
new file mode 100644
index 0000000..239a644
--- /dev/null
+++ b/kanidm-1.1.0~rc16~git1.a917291.tar.zst
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:cb5ef9fa15e52e977b6b44f7568fe2559b6d2f04f688b2dfe14d61fcbcb8888f
+size 9290753
diff --git a/kanidm.changes b/kanidm.changes
index b84c7c8..1662398 100644
--- a/kanidm.changes
+++ b/kanidm.changes
@@ -1,3 +1,129 @@
+-------------------------------------------------------------------
+Wed Feb 07 05:35:09 UTC 2024 - william.brown@suse.com
+
+- Update to version 1.1.0~rc16~git1.a917291:
+ * Correct cargo versions
+ * Release 1.1.0-rc.16 (#2483)
+ * Fix for incorrect domain migration rollbacks (#2482)
+ * Add tools for remigration and domain level raising (#2481)
+ * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
+ * Support SPN in groups claim (#2474)
+ * Credential update tweaks (#2475)
+ * Oauth2 pkce faq (#2473)
+ * Fix debian versioning (#2472)
+ * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
+ * chore(deps): bump the all group with 1 update (#2478)
+ * Fix RUV trim (#2466)
+ * 20240125 2217 client credentials grant (#2456)
+ * docs: Add application passwords design document (#2427)
+ * handling master docs (#2465)
+ * update the artifact name in the download step (#2464)
+ * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
+ * Update chat link, add keywords (#2462)
+ * PyKanidm updates and testing (#2301)
+ * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
+ * 1222 what rights does anonymous have (#2436)
+ * Fix inverted key/chain logic from TLS error improvement (#2453)
+ * Improve TLS configuration errors (#2447)
+ * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
+ * chore(deps): bump the all group with 1 update (#2441)
+ * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
+ * Return sshkey label to cli fields (#2440)
+ * Add rfc8414 metadata (#2434)
+ * Add test for delete referer invalid (#2435)
+ * Clarify role of WebUI in README.md (#2431)
+ * Adding max_ber_size option in config for ldap sync (#2416)
+ * Debian build fixes (also the book) (#2400)
+ * 2390 1980 allow native applications (#2428)
+ * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
+ * cookies (#2426)
+ * Clean RUV (#2424)
+ * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
+ * Upgrade replication to use anchors (#2423)
+ * Minor fixes for oidc with single page applications (#2420)
+ * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
+ * Use case insensitive match on substrings in line with ldap (#2419)
+ * Change OAuth2 RS Origin from the CLI (#2418)
+ * Add design diagrams (#2332)
+ * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
+ * Fix deb release flow to find the matrix split artifacts (#2406)
+ * 20231222 piv authentication (#2398)
+ * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
+ * Build the kanidm cli tools deb as well (#2402)
+ * Force apply idm migrations to apply access controls (#2401)
+ * fixing up the integration script (#2392)
+ * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
+ * chore(deps): bump the all group with 2 updates (#2395)
+ * fix backup filename and regexp pattern for cleanup (#2386)
+ * idprovider: Provide the keystore during auth (#2385)
+ * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
+ * daemon: Fix inverted logic on cache dir check (#2388)
+ * Add improved domain migration framework and default MFA (#2382)
+ * Trim and lowecase usernames (#2380)
+ * Add DN as a virtual ldap attr (#2379)
+ * fixing default for oauth2 request_parameter_supported metadata (#2378)
+ * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
+ * 20231218 ipa sync unix password (#2374)
+ * chore(deps): bump the all group with 2 updates (#2372)
+ * 1481 2024 access control rework (#2366)
+ * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
+ * chore(deps): bump the all group with 3 updates (#2363)
+ * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
+ * 249 2024 managed by syntax (#2359)
+ * typo (#2356)
+ * 20231204 ipa sync minor improvements (#2357)
+ * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
+ * Unixd build/debugging updates (#2350)
+ * 20231129 webauthn attestation (#2351)
+ * Fix handling of TPM in some trait contexts (#2347)
+ * docs: miniflux added pkce support (#2352)
+ * Using proper axum http headers lib for compatibility (#2348)
+ * Bearer should send with same caps we accept (#2345)
+ * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
+ * docs: improve grammar for book/src/developers/faq.md (#2343)
+ * Expose machine key in auth phase (#2340)
+ * 20231128 freeipa migration (#2338)
+ * Unix crossbuild scripts and docs (#2326)
+ * Expose TPM in more interface places (#2334)
+ * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
+ * Adding kanidm client config docs and notes ref #2248 (#2333)
+ * Update to the latest compact-jwt version (#2331)
+ * Adding env var configs for the server (#2329)
+ * Better errors when TPM PIN file not found (#2330)
+ * 20231120 2320 sssd compat (#2328)
+ * Resolve future send issue with keystore (#2311)
+ * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
+ * chore(deps): bump the all group with 3 updates (#2324)
+ * Add test (#2323)
+ * OAuth2 scopes validation logging missing details (#2317)
+ * Add systemd deps for unixd (#2314)
+ * 20231115 oauth2 authreq (#2310)
+ * Docs - Bump Fedora 36 to Fedora 38 (#2309)
+ * chore(deps): bump the all group with 4 updates (#2306)
+ * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
+ * Remove serde json from wasm (#2304)
+ * Fix spelling (#2303)
+ * 20231109 1122 credential class (#2300)
+ * Moving daemon tracing to OpenTelemetry (#2292)
+ * 20231101 add id cert to unixint (#2284)
+ * Docs fixes for #2296 (#2297)
+ * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
+ * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
+ * chore(deps): bump the all group with 8 updates (#2293)
+ * pw min length in account policy (#2289)
+ * WASM troubleshooting docs closes #2286 (#2291)
+ * oauth2 typo (#2290)
+ * Update notes to avoid some possible interpretation errors (#2288)
+ * Feature: kanidm CLI pulling OpenAPI schema (#2285)
+ * Feature: configurable replication poll interval (#2283)
+ * Minor improvements to incoming replication (#2279)
+ * Problems with bash completion autocomplete (#2281)
+ * Remove unused imports and clippy lint (#2276)
+ * Rework ldap bind routine (#2268)
+ * Disable inconsistent test (#2278)
+ * make versions consistent
+ * 1.1.0 rc.15 dev post-release (#2271)
+
-------------------------------------------------------------------
Wed Jan 24 01:18:23 UTC 2024 - william.brown@suse.com
diff --git a/kanidm.spec b/kanidm.spec
index 628a08d..c816653 100644
--- a/kanidm.spec
+++ b/kanidm.spec
@@ -17,7 +17,7 @@
Name: kanidm
-Version: 1.1.0~rc15~git8.122b6af
+Version: 1.1.0~rc16~git1.a917291
Release: 0
Summary: A identity management service and clients.
License: ( Apache-2.0 OR BSL-1.0 ) AND ( Apache-2.0 OR ISC OR MIT ) AND ( Apache-2.0 OR MIT ) AND ( Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT ) AND ( CC0-1.0 OR Apache-2.0 ) AND ( MIT OR Apache-2.0 OR Zlib ) AND ( Unlicense OR MIT ) AND ( Zlib OR Apache-2.0 OR MIT ) AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND MIT AND MPL-2.0 AND MPL-2.0+
@@ -115,7 +115,10 @@ cargo build --offline --release --features=kanidm_unix_int/selinux
%else
# Override buildflags, we want to use clang + lld here. It's much better/faster than bfd.
%define build_rustflags -C linker=clang -C link-arg=-fuse-ld=/usr/lib/rustlib/%{_arch}-unknown-linux-gnu/bin/gcc-ld/ld.lld -C debuginfo=2 -C incremental=false
-%{cargo_build} --features=kanidm_unix_int/tpm,kanidm_unix_int/selinux
+
+# --features=kanidm_unix_int/tpm,kanidm_unix_int/selinux
+
+%{cargo_build} --features=kanidm_unix_int/selinux
%endif
%install
diff --git a/vendor.tar.zst b/vendor.tar.zst
index f3fbaa9..deb9969 100644
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
-oid sha256:a55b8b153fd54e060d9bbb7fa2ab25090c73d4b2b30af3543ec90a966ad5bb16
-size 62700165
+oid sha256:5db0c88efe5d5ad4da9ed09732283ff34bfab7840370de1691d093a9b6aae094
+size 63147736