URL:
https://github.com/SSSD/sssd/pull/5485
Title: #5485: sudo: do not search by low usn value to improve performance
pbrezina commented:
"""
```diff
diff --git a/src/providers/ldap/sdap_sudo_refresh.c
b/src/providers/ldap/sdap_sudo_refresh.c
index 3441dd8fd..83f944ccf 100644
--- a/src/providers/ldap/sdap_sudo_refresh.c
+++ b/src/providers/ldap/sdap_sudo_refresh.c
@@ -183,7 +183,8 @@ struct tevent_req *sdap_sudo_smart_refresh_send(TALLOC_CTX *mem_ctx,
/* Download all rules from LDAP that are newer than usn */
if (srv_opts == NULL || srv_opts->max_sudo_value == NULL
|| strcmp(srv_opts->max_sudo_value, "0") == 0) {
- DEBUG(SSSDBG_TRACE_FUNC, "USN value is unknown, assuming zero.\n");
+ DEBUG(SSSDBG_TRACE_FUNC, "USN value is unknown, assuming zero and "
+ "omitting it from the filter.\n");
usn = "0";
search_filter = talloc_asprintf(state, "(%s=%s)",
map[SDAP_AT_SUDO_OC].name,
```
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5485#issuecomment-776636412