diff --git a/.gitignore b/.gitignore
index c2b447a..1b7d3fe 100644
--- a/.gitignore
+++ b/.gitignore
@@ -102,3 +102,5 @@
 /freeipa-4.9.0rc3.tar.gz.asc
 /freeipa-4.9.0.tar.gz
 /freeipa-4.9.0.tar.gz.asc
+/freeipa-4.9.1.tar.gz
+/freeipa-4.9.1.tar.gz.asc
diff --git a/freeipa.spec b/freeipa.spec
index 3fed39e..6b8ee34 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -163,7 +163,7 @@
 
 # Work-around fact that RPM SPEC parser does not accept
 # "Version: @VERSION@" in freeipa.spec.in used for Autoconf string replacement
-%define IPA_VERSION 4.9.0
+%define IPA_VERSION 4.9.1
 # Release candidate version -- uncomment with one percent for RC versions
 #%%global rc_version %%nil
 %define AT_SIGN @
@@ -176,7 +176,7 @@
 
 Name:           %{package_name}
 Version:        %{IPA_VERSION}
-Release:        2%{?rc_version:.%rc_version}%{?dist}.1
+Release:        1%{?rc_version:.%rc_version}%{?dist}
 Summary:        The Identity, Policy and Audit system
 
 License:        GPLv3+
@@ -201,7 +201,6 @@ Patch1003:      1003-Revert-WebUI-use-python3-rjsmin-to-minify-JavaScript.patch
 %endif
 # RHEL spec file only: END
 
-Patch0001:      0001-Set-client-keytab-location-for-389ds.patch
 # For the timestamp trick in patch application
 BuildRequires:  diffstat
 
@@ -1675,6 +1674,9 @@ fi
 %endif
 
 %changelog
+* Wed Jan 27 2021 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.1-1
+- Upstream release FreeIPA 4.9.1
+
 * Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 4.9.0-2.1
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
 
diff --git a/sources b/sources
index fc550e1..67bfc44 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (freeipa-4.9.0.tar.gz) = 21934147d2f5134f4dd350af801495c351fe97dfb17b5c82eb7400e773540fdb22a6dbd5f343d9a7277410bfca1265f198ea14a37c05bf69a3415352a61ab69b
-SHA512 (freeipa-4.9.0.tar.gz.asc) = c4242d0853d5eb80ae69f5506e2f31f460d2a29c74968b5fe2006abd9d7a07625a59d88b8682352d75810967746f32512df8a0a8bd9d043d97af2f35daca35be
+SHA512 (freeipa-4.9.1.tar.gz) = 6a8671752190cb347d8df6e2b02aa363662f55b78989b0182b21ac1de4bb50fa940271f62641ebcaad3ad58532bc7b91364caf0099b69140b4ebe23c610017ee
+SHA512 (freeipa-4.9.1.tar.gz.asc) = 13aeea214adcdb89175a45d33e88ec49010bd0f5ca082f5b4973b4f500d34989b877867cc1b474d9d2953f3a8a5673101653fff85b5c155c9e6d1b58d94a7caf