diff --git a/.gitignore b/.gitignore
index 1490805..bc741e1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -17,3 +17,4 @@ authconfig-6.1.8.tar.bz2
 /authconfig-6.2.5.tar.bz2
 /authconfig-6.2.6.tar.bz2
 /authconfig-6.2.7.tar.bz2
+/authconfig-6.2.8.tar.bz2
diff --git a/authconfig.spec b/authconfig.spec
index 1814dd3..b4f33f1 100644
--- a/authconfig.spec
+++ b/authconfig.spec
@@ -1,6 +1,6 @@
 Summary: Command line tool for setting up authentication from network services
 Name: authconfig
-Version: 6.2.7
+Version: 6.2.8
 Release: 1%{?dist}
 License: GPLv2+
 ExclusiveOS: Linux
@@ -119,6 +119,13 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 %{_datadir}/icons/hicolor/256x256/apps/system-config-authentication.*
 
 %changelog
+* Fri Nov  1 2013 Tomáš Mráz <tmraz@redhat.com> - 6.2.8-1
+- detect invalid LDAP uri and report error
+- fix handling of IPA domain join errors and uninstall
+- add support for winbind authentication over Kerberos 5
+- set umask=077 by default for pam_mkhomedir and pam_oddjob_mkhomedir
+- better error checking for password quality options
+
 * Fri Aug 23 2013 Tomáš Mráz <tmraz@redhat.com> - 6.2.7-1
 - samba-winbind-clients package contains the nsswitch and pam modules (#919117)
 - do not drop sss from nsswitch.conf on --update (#980861)
diff --git a/sources b/sources
index a437c82..acc0459 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-c9b357feeee2ba2d367f62d4efd1e6c0  authconfig-6.2.7.tar.bz2
+aec6123e9a105cd8ae21b9d7050fb105  authconfig-6.2.8.tar.bz2