For the record SPAKE is documented at https://web.mit.edu/kerberos/krb5-latest/doc/admin/spake.html

master:

• 9c0a35f Add new authentication indicators in kdc.conf.template
• d057040 Extend the list of supported pre-auth mechanisms in IPA server API
• c7b938a Enable krb5 snippet updates on client update
• 39e3704 Move certauth configuration into a server krb5.conf template
• 179c8f4 Add a skeleton kdcpolicy plugin
• 15ff9c8 Implement user pre-authentication control with kdcpolicy plugin
• b66e8a1 Modify webUI to adhere to new IPA server API
• 952dd2a Add design document

ipa-4-8:

• e1dad72 Add new authentication indicators in kdc.conf.template
• 67467f4 Extend the list of supported pre-auth mechanisms in IPA server API
• b2e540c Enable krb5 snippet updates on client update
• 80be759 Move certauth configuration into a server krb5.conf template
• 3a8980f Add a skeleton kdcpolicy plugin
• 76d1f94 Implement user pre-authentication control with kdcpolicy plugin
• 3e42d74 Modify webUI to adhere to new IPA server API
• 027e30d Add design document

master:

• 9db6f65 Allow presence of LDAP attribute options
• c5f3216 Add Authentication Indicator Kerberos ticket policy options
• c02cc93 Add integration test for Kerberos ticket policy

master:

• 094cf62 Nightly definition: use right template for krbtpolicy

ipa-4-8:

• 4dbd689 Allow presence of LDAP attribute options
• 14ff82f Add Authentication Indicator Kerberos ticket policy options
• bc007ec Add integration test for Kerberos ticket policy

ipa-4-8:

• 04cfaa1 Nightly definition: use right template for krbtpolicy

master:

• f0d12b7 ipa-kdb: Remove keys if password auth is disabled

ipa-4-8:

• aaf8fcc ipa-kdb: Remove keys if password auth is disabled

master:

• 83ec929 Add integration test for otp kerberos ticket policy.

ipa-4-8:

• 27a6920 Add integration test for otp kerberos ticket policy.

master:

• f35738e Add xmlrpc test with input validation check for kerberos ticket policy.

ipa-4-8:

• acbbc52 Add xmlrpc test with input validation check for kerberos ticket policy.

master:

• 35e94be ipa-kdb: do not remove keys for hardened auth-enabled users
• 97d123c ipatests: add case for hardened-only ticket policy

ipa-4-9:

• 6d70421 ipa-kdb: do not remove keys for hardened auth-enabled users
• 294ae35 ipatests: add case for hardened-only ticket policy