Title: #806: sudo: always use server highest usn for smart refresh
I amended the commit message.
> Additionally I wonder if some details about how the highest USN is updated
(reconnect, enumeration) can be added to the man pages entry for the smart refresh?
In my opinion it is not needed. It can not be configured and it does not change the
result. It is merely an optimization.
I think it can be configured. Since the highest USN is only updated during reconnect or
enumeration the related timeouts can be important here. I'm thinking of cases where
`ldap_sudo_smart_refresh_interval` is lowered because this ticket make it sound safe to
run smart refresh more often. But the logs will show that the USN in the search filter
might be only updated every 15min after a reconnect.
Ack to the Sumit's patch :-)
See the full comment at https://github.com/SSSD/sssd/pull/806#issuecomment-492176604