URL: https://github.com/SSSD/sssd/pull/806 Title: #806: sudo: always use server highest usn for smart refresh
sumit-bose commented: """ > I see. So if enumeration is disabled we are stuck in the same situation as we > are now. Yes, that's my finding as well. Using the patch for sdap_steal_server_opts() helps to mitigate this by refreshing last_usn at least on every reconnect. The alternative would be to read lastUSN from the rootDSE explicitly with every smart refresh. """ See the full comment at https://github.com/SSSD/sssd/pull/806#issuecomment-489967231
_______________________________________________ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org