diff --git a/0001-Drop-module-long-test.patch b/0001-Drop-module-long-test.patch
deleted file mode 100644
index 2b5d4ce5e81056f8feaaf725acfdcdb7fb4fac65..0000000000000000000000000000000000000000
--- a/0001-Drop-module-long-test.patch
+++ /dev/null
@@ -1,25 +0,0 @@
-From 929e1949936767484e623dc1f93f3e559f871958 Mon Sep 17 00:00:00 2001
-From: Pat Riehecky <riehecky@fnal.gov>
-Date: Mon, 2 May 2022 09:59:37 -0500
-Subject: [PATCH] Drop module/long test
-
-https://github.com/rra/pam-krb5/issues/25
----
- tests/TESTS | 1 -
- 1 file changed, 1 deletion(-)
-
-diff --git a/tests/TESTS b/tests/TESTS
-index f9036b1..149f52f 100644
---- a/tests/TESTS
-+++ b/tests/TESTS
-@@ -27,7 +27,6 @@ module/cache-cleanup    valgrind
- module/expired          valgrind
- module/fast             valgrind
- module/fast-anon
--module/long             valgrind
- module/no-cache         valgrind
- module/pam-user         valgrind
- module/password         valgrind
--- 
-2.35.1
-
diff --git a/pam_krb5-2.4.13.tar.gz b/pam_krb5-2.4.13.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..2fe878345eb4dfb6f68b18250e4831ee35c5f815
Binary files /dev/null and b/pam_krb5-2.4.13.tar.gz differ
diff --git a/pam_krb5-2.4.13.tar.gz.sig b/pam_krb5-2.4.13.tar.gz.sig
new file mode 100644
index 0000000000000000000000000000000000000000..4950c21f3b1f7732a645803d6f84ee2665bbd452
Binary files /dev/null and b/pam_krb5-2.4.13.tar.gz.sig differ
diff --git a/pam_krb5-4.11.tar.gz b/pam_krb5-4.11.tar.gz
deleted file mode 100644
index 4b3d476f3ef8ea80204a1ab58c92c63779f5246a..0000000000000000000000000000000000000000
Binary files a/pam_krb5-4.11.tar.gz and /dev/null differ
diff --git a/pam_krb5.spec b/pam_krb5.spec
index aea78b2b6d08c9609f9480dd15193de8df640754..b882ca71391573bf042637e287f15500a77a9de9 100644
--- a/pam_krb5.spec
+++ b/pam_krb5.spec
@@ -1,70 +1,57 @@
-Name:		pam_krb5
-Version:	4.11
-Release:	1
-Summary:	A Pluggable Authentication Module for Kerberos 5
-License:	MIT and BSD
-Group:		System/Libraries
-URL:		https://github.com/rra/pam-krb5
-Source0:	%{url}/archive/refs/tags/upstream/%{version}.tar.gz#/%{name}-%{version}.tar.gz
-Patch0001:	0001-Drop-module-long-test.patch
-
-Requires:	pam
-
-BuildRequires:	byacc
-BuildRequires:	flex
-BuildRequires:	gcc
-BuildRequires:	krb5-devel
-BuildRequires:	pam-devel
-
-# for testing
-BuildRequires:	perl(lib)
-BuildRequires:	perl(Test::Pod)
-
-%description 
-pam-krb5 is a Kerberos v5 PAM module for either MIT Kerberos or
-Heimdal.  It supports ticket refreshing by screen savers, configurable
-authorization handling, authentication of non-local accounts for
-network services, password changing, and password expiration, as well
-as all the standard expected PAM features.  It works correctly with
-OpenSSH, even with ChallengeResponseAuthentication and
-PrivilegeSeparation enabled, and supports extensive configuration
-either by PAM options or in krb5.conf or both.  PKINIT is supported
-with recent versions of both MIT Kerberos and Heimdal and FAST is
-supported with recent MIT Kerberos.
-  
-%prep 
-%setup -q -n pam-krb5-upstream-%{version}
-
-%autopatch -p1
+Name:           pam_krb5
+Version:        2.4.13
+Release:        15
+Summary:        A Pluggable Authentication Module for Kerberos 5
+License:        BSD or LGPLv2+
+URL:            https://pagure.io/pam_krb5
+Source0:        https://releases.pagure.org/pam_krb5/pam_krb5-%{version}.tar.gz
+Source1:        https://releases.pagure.org/pam_krb5/pam_krb5-%{version}.tar.gz.sig
+
+BuildRequires: gcc krb5-devel pam-devel
+%description
+This PAM module supports authentication against a Kerberos KDC. It also
+supports updating your Kerberos password.
+
+%package_help
+
+%prep
+%autosetup -n %{name}-%{version} -p1
 
 %build
-%configure --libdir=%{_libdir}
-%make_build
+%configure --with-default-use-shmem="sshd" --with-default-external="sshd sshd-rekey gssftp" \
+           --with-default-multiple-ccaches="su su-l"  --with-default-no-cred-session="sshd" 
+make %{?_smp_mflags}
 
 %install
-%make_install
+rm -rf %{buildroot}
+%make_install INSTALL="install -p"
+ln -s pam_krb5.so %{buildroot}/%{_libdir}/security/pam_krb5afs.so
+sed -ri -e 's|/lib(64)?/|/\$LIB/|g' %{buildroot}/%{_mandir}/man*/pam_krb5*.8*
+%delete_la
+
+%find_lang %{name}
 
-# Make the paths jive to avoid conflicts on multilib systems.
-sed -ri -e 's|/lib(64)?/|/\$LIB/|g' %{buildroot}/%{_mandir}/man*/pam_krb5*.5*
+%pre
 
-# cleanup
-rm -f %{buildroot}/%{_libdir}/security/*.la
+%preun
 
-%check
-# https://github.com/rra/pam-krb5/issues/25
-# self-tests fail unless a default realm is set.
-# That has to be done as someone with write access to /etc/
-# which is not the mockbuild user.
-#
-%{__make} check
+%post
 
-%files
-%license LICENSE
-%doc README NEWS TODO
+%postun
+
+%files -f %{name}.lang
+%doc COPYING*
+%{_bindir}/*
 %{_libdir}/security/*
-%{_mandir}/man5/*
+
+%files help
+%doc README* ChangeLog NEWS
+%{_mandir}/*/*
 
 %changelog
+* Tue Jul 30 2024 wangqingsan <wangqingsan@huawei.com> - 2.4.13-15
+- DESC: rollback version to 2.4.13
+
 * Tue Apr 18 2023 chenchen <chen_aka_jan@163.com> - 4.11-1
 - Update to 4.11.