Red Hat Bugzilla – Bug 884666
sudo: if first full refresh fails, schedule another first full refresh
Last modified: 2013-02-21 04:42:18 EST
This bug is created as a clone of upstream ticket: https://fedorahosted.org/sssd/ticket/1689 When SSSD starts we need to perform sudo full refresh in order to obtain current USN values. Without these values, smart refresh won't work correctly. At the moment, if the first full refresh fails because of server error (e.g. offline), we just continue as planned - i.e. schedule new full refresh after a long period (like 6 hours) and schedule smart refresh in short period (15 minutes). This means that the smart refresh won't work for several hours, until the full refresh is performed. We should reset the state and try to perform the first full refresh again after a short interval.
Oops, wrong bug. Flipping back to assigned, I confused this bug with one that fixes #1682.
Verified as fixed with the following packages: libsss_idmap-1.9.2-59.el6.x86_64 sssd-client-1.9.2-59.el6.x86_64 sudo-1.8.6p3-6.el6.x86_64 sssd-1.9.2-59.el6.x86_64 libsss_sudo-1.9.2-59.el6.x86_64 Relevant sudo suite output: :: [ PASS ] :: full_refresh_init_retry
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2013-0508.html