For the record SPAKE is documented at https://web.mit.edu/kerberos/krb5-latest/doc/admin/spake.html

master:

• 9c0a35f1e79033585786c2567aedcb3b4c10a6b6 Add new authentication indicators in kdc.conf.template
• d0570404ef5a79dfc08d7959d21e9e4843973faf Extend the list of supported pre-auth mechanisms in IPA server API
• c7b938a1d5c20df24a2d8a62019c5341e0f26c63 Enable krb5 snippet updates on client update
• 39e3704a0679d117f5145044e73726175a8f600b Move certauth configuration into a server krb5.conf template
• 179c8f4009adc30b9b3c497855f15927016c84db Add a skeleton kdcpolicy plugin
• 15ff9c8fecdff5556e27b7c9eebd45d327044bc0 Implement user pre-authentication control with kdcpolicy plugin
• b66e8a1ee295e11e286979a0bd9ce303cbab2aa5 Modify webUI to adhere to new IPA server API
• 952dd2a50fe3c3dc099b14af23cd050048235fa3 Add design document

ipa-4-8:

• e1dad72f272f418c46733449745ac6e99d4d2ced Add new authentication indicators in kdc.conf.template
• 67467f4f789fc0ff6cf38aca707eaa40ddebdcd2 Extend the list of supported pre-auth mechanisms in IPA server API
• b2e540cb70a394cf5df29078ef6507960415ca66 Enable krb5 snippet updates on client update
• 80be759fdced6e34701519b00f4a29466b1492eb Move certauth configuration into a server krb5.conf template
• 3a8980f25b9f029335426261131924a7a5781bee Add a skeleton kdcpolicy plugin
• 76d1f94453cbde13d16046cde315ba1d47e4163b Implement user pre-authentication control with kdcpolicy plugin
• 3e42d747ec6d6c99fe25e295d3f1153e0dbeb4e2 Modify webUI to adhere to new IPA server API
• 027e30db70cfa75146e7b312690cdfeb8eb81a5a Add design document

master:

• 9db6f65a8536781f6bca20ff8031de18c0f79397 Allow presence of LDAP attribute options
• c5f32165d6105a48d9de85a8d29925b58beb9f91 Add Authentication Indicator Kerberos ticket policy options
• c02cc93c146bca429f69bf5536a3f6c15b02876e Add integration test for Kerberos ticket policy

master:

• 094cf629b338b78d13b15b87b4844c487c150e39 Nightly definition: use right template for krbtpolicy

ipa-4-8:

• 4dbd689e301a20d38a40e827ba58bc5c667ff0d8 Allow presence of LDAP attribute options
• 14ff82f3b86ceeb0836b0354b7edb965db72b494 Add Authentication Indicator Kerberos ticket policy options
• bc007eca9361709f65bb9da0a8cc101a0b978ef1 Add integration test for Kerberos ticket policy

ipa-4-8:

• 04cfaa1861d4c88eab6b3d29fbb68e2ae2223214 Nightly definition: use right template for krbtpolicy

master:

• f0d12b7f1b06af8ad369041b64dc763441a1a44a ipa-kdb: Remove keys if password auth is disabled

ipa-4-8:

• aaf8fccbb65e82d33c6e3675f3195163feb8af34 ipa-kdb: Remove keys if password auth is disabled

master:

• 83ec9296a906d10b44c80d6534b94f03b443b2e6 Add integration test for otp kerberos ticket policy.

ipa-4-8:

• 27a6920d50e5d63afbfc198e64885a2cd3fadc48 Add integration test for otp kerberos ticket policy.

master:

• f35738ef22aac54c09d64e3a7985298faf9ac1eb Add xmlrpc test with input validation check for kerberos ticket policy.

ipa-4-8:

• acbbc52999f8c7694d549b709bc8caea801dc94c Add xmlrpc test with input validation check for kerberos ticket policy.

master:

• 35e94bee0e0da4cf43c613a5296d57f7e04b583a ipa-kdb: do not remove keys for hardened auth-enabled users
• 97d123ccccb50098e21884a0aa9d90ed017ef97e ipatests: add case for hardened-only ticket policy

ipa-4-9:

• 6d70421f57d0eca066a922e09416ef7195ee96d4 ipa-kdb: do not remove keys for hardened auth-enabled users
• 294ae35a61e6ca8816b261c57508e4be21221864 ipatests: add case for hardened-only ticket policy