diff --git a/backport-BUILD-Accept-krb5-1.21-for-building-the-PAC-plugin.patch b/backport-BUILD-Accept-krb5-1.21-for-building-the-PAC-plugin.patch
deleted file mode 100644
index abbc34d..0000000
--- a/backport-BUILD-Accept-krb5-1.21-for-building-the-PAC-plugin.patch
+++ /dev/null
@@ -1,31 +0,0 @@
-From 74d0f4538deb766592079b1abca0d949d6dea105 Mon Sep 17 00:00:00 2001
-From: Alexey Tikhonov <atikhono@redhat.com>
-Date: Thu, 15 Jun 2023 12:05:03 +0200
-Subject: [PATCH] BUILD: Accept krb5 1.21 for building the PAC plugin
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-
-Reviewed-by: Alejandro López <allopez@redhat.com>
-Reviewed-by: Sumit Bose <sbose@redhat.com>
----
- src/external/pac_responder.m4 | 3 ++-
- 1 file changed, 2 insertions(+), 1 deletion(-)
-
-diff --git a/src/external/pac_responder.m4 b/src/external/pac_responder.m4
-index 3cbe3c9cf..90727185b 100644
---- a/src/external/pac_responder.m4
-+++ b/src/external/pac_responder.m4
-@@ -22,7 +22,8 @@ then
-         Kerberos\ 5\ release\ 1.17* | \
-         Kerberos\ 5\ release\ 1.18* | \
-         Kerberos\ 5\ release\ 1.19* | \
--        Kerberos\ 5\ release\ 1.20*)
-+        Kerberos\ 5\ release\ 1.20* | \
-+        Kerberos\ 5\ release\ 1.21*)
-             krb5_version_ok=yes
-             AC_MSG_RESULT([yes])
-             ;;
--- 
-2.33.0
-
diff --git a/sssd-2.9.1.tar.gz b/sssd-2.9.4.tar.gz
similarity index 50%
rename from sssd-2.9.1.tar.gz
rename to sssd-2.9.4.tar.gz
index c7801f2..51a8a27 100644
Binary files a/sssd-2.9.1.tar.gz and b/sssd-2.9.4.tar.gz differ
diff --git a/sssd.spec b/sssd.spec
index 67e1adc..db36c95 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -1,12 +1,11 @@
 Name: sssd
-Version: 2.9.1
-Release: 2
+Version: 2.9.4
+Release: 1
 Summary: System Security Services Daemon
 License: GPLv3+ and LGPLv3+
 URL: https://pagure.io/SSSD/sssd/
 Source0: https://github.com/SSSD/sssd/releases/download/%{version}/%{name}-%{version}.tar.gz
 
-Patch0001:   backport-BUILD-Accept-krb5-1.21-for-building-the-PAC-plugin.patch
 
 Requires: python3-sssd = %{version}-%{release}
 Requires: libldb
@@ -527,6 +526,12 @@ fi
 %systemd_postun_with_restart sssd.service
 
 %changelog
+* Mon Feb 5 2024 wangcheng <wangcheng156@huawei.com> - 2.9.4-1
+- upgrade to 2.9.4
+  fix some important bugs
+  feature: remove the oldest expired credential to free some space
+  new configuration option local_auth_policy is added
+
 * Thu Aug 10 2023 wangcheng <wangcheng156@huawei.com> - 2.9.1-2
 - fix build fail