This bug is created as a clone of upstream ticket:
When SSSD starts we need to perform sudo full refresh in order to obtain current USN values. Without these values, smart refresh won't work correctly.
At the moment, if the first full refresh fails because of server error (e.g. offline), we just continue as planned - i.e. schedule new full refresh after a long period (like 6 hours) and schedule smart refresh in short period (15 minutes). This means that the smart refresh won't work for several hours, until the full refresh is performed.
We should reset the state and try to perform the first full refresh again after a short interval.
Oops, wrong bug. Flipping back to assigned, I confused this bug with one that fixes #1682.
Verified as fixed with the following packages:
Relevant sudo suite output:
:: [ PASS ] :: full_refresh_init_retry
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.