diff --git a/0001-Drop-module-long-test.patch b/0001-Drop-module-long-test.patch
new file mode 100644
index 0000000000000000000000000000000000000000..2b5d4ce5e81056f8feaaf725acfdcdb7fb4fac65
--- /dev/null
+++ b/0001-Drop-module-long-test.patch
@@ -0,0 +1,25 @@
+From 929e1949936767484e623dc1f93f3e559f871958 Mon Sep 17 00:00:00 2001
+From: Pat Riehecky <riehecky@fnal.gov>
+Date: Mon, 2 May 2022 09:59:37 -0500
+Subject: [PATCH] Drop module/long test
+
+https://github.com/rra/pam-krb5/issues/25
+---
+ tests/TESTS | 1 -
+ 1 file changed, 1 deletion(-)
+
+diff --git a/tests/TESTS b/tests/TESTS
+index f9036b1..149f52f 100644
+--- a/tests/TESTS
++++ b/tests/TESTS
+@@ -27,7 +27,6 @@ module/cache-cleanup    valgrind
+ module/expired          valgrind
+ module/fast             valgrind
+ module/fast-anon
+-module/long             valgrind
+ module/no-cache         valgrind
+ module/pam-user         valgrind
+ module/password         valgrind
+-- 
+2.35.1
+
diff --git a/pam_krb5-2.4.13.tar.gz b/pam_krb5-2.4.13.tar.gz
deleted file mode 100644
index 2fe878345eb4dfb6f68b18250e4831ee35c5f815..0000000000000000000000000000000000000000
Binary files a/pam_krb5-2.4.13.tar.gz and /dev/null differ
diff --git a/pam_krb5-2.4.13.tar.gz.sig b/pam_krb5-2.4.13.tar.gz.sig
deleted file mode 100644
index 4950c21f3b1f7732a645803d6f84ee2665bbd452..0000000000000000000000000000000000000000
Binary files a/pam_krb5-2.4.13.tar.gz.sig and /dev/null differ
diff --git a/pam_krb5-4.11.tar.gz b/pam_krb5-4.11.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..4b3d476f3ef8ea80204a1ab58c92c63779f5246a
Binary files /dev/null and b/pam_krb5-4.11.tar.gz differ
diff --git a/pam_krb5.spec b/pam_krb5.spec
index 530d68e19db8c6e285b877598ed0507a45ccbac1..aea78b2b6d08c9609f9480dd15193de8df640754 100644
--- a/pam_krb5.spec
+++ b/pam_krb5.spec
@@ -1,54 +1,73 @@
-Name:           pam_krb5
-Version:        2.4.13
-Release:        14
-Summary:        A Pluggable Authentication Module for Kerberos 5
-License:        BSD or LGPLv2+
-URL:            https://pagure.io/pam_krb5
-Source0:        https://releases.pagure.org/pam_krb5/pam_krb5-%{version}.tar.gz
-Source1:        https://releases.pagure.org/pam_krb5/pam_krb5-%{version}.tar.gz.sig
+Name:		pam_krb5
+Version:	4.11
+Release:	1
+Summary:	A Pluggable Authentication Module for Kerberos 5
+License:	MIT and BSD
+Group:		System/Libraries
+URL:		https://github.com/rra/pam-krb5
+Source0:	%{url}/archive/refs/tags/upstream/%{version}.tar.gz#/%{name}-%{version}.tar.gz
+Patch0001:	0001-Drop-module-long-test.patch
 
-BuildRequires: gcc krb5-devel pam-devel
-%description
-This PAM module supports authentication against a Kerberos KDC. It also
-supports updating your Kerberos password.
+Requires:	pam
 
-%package_help
+BuildRequires:	byacc
+BuildRequires:	flex
+BuildRequires:	gcc
+BuildRequires:	krb5-devel
+BuildRequires:	pam-devel
 
-%prep
-%autosetup -n %{name}-%{version} -p1
+# for testing
+BuildRequires:	perl(lib)
+BuildRequires:	perl(Test::Pod)
 
-%build
-%configure --with-default-use-shmem="sshd" --with-default-external="sshd sshd-rekey gssftp" \
-           --with-default-multiple-ccaches="su su-l"  --with-default-no-cred-session="sshd" 
-make %{?_smp_mflags}
+%description 
+pam-krb5 is a Kerberos v5 PAM module for either MIT Kerberos or
+Heimdal.  It supports ticket refreshing by screen savers, configurable
+authorization handling, authentication of non-local accounts for
+network services, password changing, and password expiration, as well
+as all the standard expected PAM features.  It works correctly with
+OpenSSH, even with ChallengeResponseAuthentication and
+PrivilegeSeparation enabled, and supports extensive configuration
+either by PAM options or in krb5.conf or both.  PKINIT is supported
+with recent versions of both MIT Kerberos and Heimdal and FAST is
+supported with recent MIT Kerberos.
+  
+%prep 
+%setup -q -n pam-krb5-upstream-%{version}
 
-%install
-rm -rf %{buildroot}
-%make_install INSTALL="install -p"
-ln -s pam_krb5.so %{buildroot}/%{_libdir}/security/pam_krb5afs.so
-sed -ri -e 's|/lib(64)?/|/\$LIB/|g' %{buildroot}/%{_mandir}/man*/pam_krb5*.8*
-%delete_la
+%autopatch -p1
 
-%find_lang %{name}
+%build
+%configure --libdir=%{_libdir}
+%make_build
 
-%pre
+%install
+%make_install
 
-%preun
+# Make the paths jive to avoid conflicts on multilib systems.
+sed -ri -e 's|/lib(64)?/|/\$LIB/|g' %{buildroot}/%{_mandir}/man*/pam_krb5*.5*
 
-%post
+# cleanup
+rm -f %{buildroot}/%{_libdir}/security/*.la
 
-%postun
+%check
+# https://github.com/rra/pam-krb5/issues/25
+# self-tests fail unless a default realm is set.
+# That has to be done as someone with write access to /etc/
+# which is not the mockbuild user.
+#
+%{__make} check
 
-%files -f %{name}.lang
-%doc COPYING*
-%{_bindir}/*
+%files
+%license LICENSE
+%doc README NEWS TODO
 %{_libdir}/security/*
-
-%files help
-%doc README* ChangeLog NEWS
-%{_mandir}/*/*
+%{_mandir}/man5/*
 
 %changelog
+* Tue Apr 18 2023 chenchen <chen_aka_jan@163.com> - 4.11-1
+- Update to 4.11.
+
 * Fri Jul 30 2021 chenyanpanHW <chenyanpan@huawei.com> - 2.4.13-14
 - DESC: delete -Sgit from %autosetup, and delete BuildRequires git