diff --git a/sys-auth/sssd/Manifest b/sys-auth/sssd/Manifest
index 96947b1..7b7121d 100644
--- a/sys-auth/sssd/Manifest
+++ b/sys-auth/sssd/Manifest
@@ -1,2 +1,2 @@
-DIST sssd-2.9.0.tar.gz 7935100 BLAKE2B 61181921ac28acb282b2ac7c67ae21c9d4bb470df5c9e5f7c55901b7a632345235a553b2fb215fa36f2b27b47e3c877b8fe6ac7377ec35582c5c07b3797bc74b SHA512 cf65572cfa6468c4b3edc3a33a48ab6d58979917901662eb8b2d8fc5931494be81da13295246500a3a315b71d0395594c9a565014e5875f3cdde50da096f253d
-DIST sssd-2.9.0.tar.gz.asc 833 BLAKE2B c76f82348660baeb19cf669ef972c085bbf5c795e9e853306833f4275505113b2bdb97c9b9a992aa114ac9a524c139e363df0f2afaf69c044932b9c34d3dd606 SHA512 e5f7c8af982e583ede3339ff7ff8ba293e9d96d08b4468d4215df65d27fa17a54b06d5b5129f92641bc6068fbf44e53f68c7608a9b1ab2d7007e2a8ca23b9888
+DIST sssd-2.9.1.tar.gz 7943540 BLAKE2B 9113b63d54beb40ba85c5b5c75068197317b3b8088119cf6557c6b4aed113d2d67f0bc64fc68fb34f4dbef54cccdb8b32ef44112115930751fdec5ec92e0a09b SHA512 eb7345dcfbbd51f005f67ee5032364d369d24589111ded60701e2dbe09563f0b862d343f231dd2e9d548acd8c560a036c8b88a0601f9aa048a7202da8202cd9b
+DIST sssd-2.9.1.tar.gz.asc 833 BLAKE2B 08d3a6539e42dde4bd8dcfe3ceba3746fb579ed9703982d866d9fa2651a5ff99bf5553030cd5d932920a7737e3569d17d3120ffa384051ea81af190160aff446 SHA512 bf56a32d23aed2c85156427b10e42f1fe8f633316a81c2b416ba165a9548b4e830712968cf6690749637b674d983ff450dd8038a0f4ccfae25cc447c6ac6fa2e
diff --git a/sys-auth/sssd/files/sssd-2.9.0-conditional-python-install.patch b/sys-auth/sssd/files/sssd-2.9.1-conditional-python-install.patch
similarity index 100%
rename from sys-auth/sssd/files/sssd-2.9.0-conditional-python-install.patch
rename to sys-auth/sssd/files/sssd-2.9.1-conditional-python-install.patch
diff --git a/sys-auth/sssd/files/sssd-2.9.1-mit-krb-1.21.patch b/sys-auth/sssd/files/sssd-2.9.1-mit-krb-1.21.patch
new file mode 100644
index 0000000..01aef9b
--- /dev/null
+++ b/sys-auth/sssd/files/sssd-2.9.1-mit-krb-1.21.patch
@@ -0,0 +1,28 @@
+From 74d0f4538deb766592079b1abca0d949d6dea105 Mon Sep 17 00:00:00 2001
+From: Alexey Tikhonov <atikhono@redhat.com>
+Date: Thu, 15 Jun 2023 12:05:03 +0200
+Subject: [PATCH] BUILD: Accept krb5 1.21 for building the PAC plugin
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+Reviewed-by: Alejandro López <allopez@redhat.com>
+Reviewed-by: Sumit Bose <sbose@redhat.com>
+---
+ src/external/pac_responder.m4 | 3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+diff --git a/src/external/pac_responder.m4 b/src/external/pac_responder.m4
+index 3cbe3c9cfb..90727185b5 100644
+--- a/src/external/pac_responder.m4
++++ b/src/external/pac_responder.m4
+@@ -22,7 +22,8 @@ then
+         Kerberos\ 5\ release\ 1.17* | \
+         Kerberos\ 5\ release\ 1.18* | \
+         Kerberos\ 5\ release\ 1.19* | \
+-        Kerberos\ 5\ release\ 1.20*)
++        Kerberos\ 5\ release\ 1.20* | \
++        Kerberos\ 5\ release\ 1.21*)
+             krb5_version_ok=yes
+             AC_MSG_RESULT([yes])
+             ;;
diff --git a/sys-auth/sssd/sssd-2.9.0.ebuild b/sys-auth/sssd/sssd-2.9.1.ebuild
similarity index 98%
rename from sys-auth/sssd/sssd-2.9.0.ebuild
rename to sys-auth/sssd/sssd-2.9.1.ebuild
index c6d8d9d..3f88a61 100644
--- a/sys-auth/sssd/sssd-2.9.0.ebuild
+++ b/sys-auth/sssd/sssd-2.9.1.ebuild
@@ -102,7 +102,8 @@ BDEPEND="
 CONFIG_CHECK="~KEYS"
 
 PATCHES=(
-	"${FILESDIR}"/${PN}-2.9.0-conditional-python-install.patch
+	"${FILESDIR}"/${PN}-2.9.1-conditional-python-install.patch
+	"${FILESDIR}"/${PN}-2.9.1-mit-krb-1.21.patch
 )
 
 MULTILIB_WRAPPED_HEADERS=(