diff --git a/.gitignore b/.gitignore
index bc111b6..c9203e4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -96,3 +96,4 @@ sssd-1.2.91.tar.gz
 /sssd-2.6.1.tar.gz
 /sssd-2.6.2.tar.gz
 /sssd-2.7.0.tar.gz
+/sssd-2.7.1.tar.gz
diff --git a/sources b/sources
index 3a08303..d0a3c9f 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (sssd-2.7.0.tar.gz) = 578ee5b5a0160fce2ea9269d6082a6517ee63cd9ea8ea8a202f1a5d7783ae0f02d18a8a32a48dc8773e1a9d28093c9256d8d26d42a2facf20b57cadf419a854c
+SHA512 (sssd-2.7.1.tar.gz) = 12b5972512488ce3588406511f5414ccec2d8042655bc9e04bc4acf3dbbe9679d6288b50e38e9c06280564b76cff7268ed4b44ae2692cd2a989f4edbe717884a
diff --git a/sssd.spec b/sssd.spec
index 9589fab..9a890d2 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -26,8 +26,8 @@
 %global samba_package_version %(rpm -q samba-devel --queryformat %{version}-%{release})
 
 Name: sssd
-Version: 2.7.0
-Release: 2%{?dist}
+Version: 2.7.1
+Release: 1%{?dist}
 Summary: System Security Services Daemon
 License: GPLv3+
 URL: https://github.com/SSSD/sssd/
@@ -858,6 +858,7 @@ done
 %{_mandir}/man8/pam_sss.8*
 %{_mandir}/man8/pam_sss_gss.8*
 %{_mandir}/man8/sssd_krb5_locator_plugin.8*
+%{_mandir}/man8/sssd_krb5_localauth_plugin.8*
 
 %files -n libsss_sudo
 %license src/sss_client/COPYING
@@ -1058,6 +1059,17 @@ fi
 %systemd_postun_with_restart sssd.service
 
 %changelog
+* Sat Jun  4 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-1
+- Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
+- Resolves: rhbz#1893192 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
+- Resolves: rhbz#1927553 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
+- Resolves: rhbz#2089216 - pam_sss_gss ceased to work after upgrade to 8.6
+- Resolves: rhbz#2090776 - Add idp authentication indicator in man page of sssd.conf
+- Resolves: rhbz#1927195 - sssd runs out of proxy child slots and doesn't clear the counter for Active requests
+- Resolves: rhbz#2073095 - Harden kerberos ticket validation
+- Resolves: rhbz#2082455 - 'getent hosts' not return hosts if they have more than one CN in LDAP
+- Resolves: rhbz#2087581 - Regression "Missing internal domain data." when setting ad_domain to incorrect
+
 * Wed May 11 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-2
 - Resolves: rhbz#2065693 - [RHEL9] Ship new sub-package called sssd-idp into sssd