IPA: Add threshold for sudo searches Apply the sudo threshold to IPA provider sudo command and command group searches to prevent SSSD from creating large search filters. The IPA sudo threshold value will utilize the sudo responder sudo_threshold value. If the threshold is exceeded, a basic search filter will be used as a fallback to retrieve all IPA sudo commands or command groups. Resolves: https://pagure.io/SSSD/sssd/issue/3507 Reviewed-by: Pavel Březina <pbrezina@redhat.com>

IPA: Save sudoUser qualified in the cache When converting from the native IPA schema to the sysdb sudo schema, qualify sudoUser attributes that contain user and group names. Reviewed-by: Sumit Bose <sbose@redhat.com>

SUDO: assume zero if usn is unknown When we switched to be_ptaks full_refresh_done has become obsolete since timing is handled in a better way. In case of unknown USN we assume zero which allows us to disable full refresh completely in configuration. Reviewed-by: Sumit Bose <sbose@redhat.com>

SUDO: remove full_refresh_in_progress When we switched to be_ptask this variable has become obsolete. Reviewed-by: Sumit Bose <sbose@redhat.com>

IPA SUDO: Implement smart refresh Reviewed-by: Sumit Bose <sbose@redhat.com>

IPA SUDO: Implement rules refresh Reviewed-by: Sumit Bose <sbose@redhat.com>

IPA SUDO: Implement full refresh Reviewed-by: Sumit Bose <sbose@redhat.com>

IPA SUDO: Implement sudo handler Resolves: https://fedorahosted.org/sssd/ticket/XXXX Reviewed-by: Sumit Bose <sbose@redhat.com>