URL: https://github.com/SSSD/sssd/pull/806 Title: #806: sudo: always use server highest usn for smart refresh
sumit-bose commented: """
I amended the commit message.
Additionally I wonder if some details about how the highest USN is updated (reconnect, enumeration) can be added to the man pages entry for the smart refresh?
In my opinion it is not needed. It can not be configured and it does not change the result. It is merely an optimization.
I think it can be configured. Since the highest USN is only updated during reconnect or enumeration the related timeouts can be important here. I'm thinking of cases where `ldap_sudo_smart_refresh_interval` is lowered because this ticket make it sound safe to run smart refresh more often. But the logs will show that the USN in the search filter might be only updated every 15min after a reconnect.
Ack to the Sumit's patch :-)
"""
See the full comment at https://github.com/SSSD/sssd/pull/806#issuecomment-492176604