#3997 sudo: always use server highest usn for smart refresh
Closed: Fixed by jhrozek. Opened by pbrezina.

The sudo attributes may not be indexed on the server, therefore if smart refresh filter is run on the server it may first search using the indexed entryusn attribute and run the rest of the filter on non-sudo objects. The number of objects that are filtered may increased dramatically if sudo rules are not changed for a long time (and thus keeping smaller and smaller last sudo usn number).


  • master:
  • f8bae064ebbc038616fb45e99cf02a996730e866
  • f1ce524ed0a623ce131830f122fbce5abd39ec45
  • 819d70ef6e6fa0e736ebd60a7f8a26f672927d57

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

Metadata Update from @jhrozek:
- Issue assigned to pbrezina
- Issue set to the milestone: SSSD 2.2
- Issue tagged with: bug

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4969

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata