providers: Move hostid from ipa to sdap, v2 In the ldap provider, all option names are renamed to ldap_host_*. In the ipa provider the names haven't been changed. Host lookups for both ipa and ldap are handled in the ldap provider. sss_ssh_knownhostsproxy works but hostgroups are still only available in the ipa provider. I've also added some documentation for the ldap provider. Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

IPA: Add threshold for sudo searches Apply the sudo threshold to IPA provider sudo command and command group searches to prevent SSSD from creating large search filters. The IPA sudo threshold value will utilize the sudo responder sudo_threshold value. If the threshold is exceeded, a basic search filter will be used as a fallback to retrieve all IPA sudo commands or command groups. Resolves: https://pagure.io/SSSD/sssd/issue/3507 Reviewed-by: Pavel Březina <pbrezina@redhat.com>

IPA: Save sudoUser qualified in the cache When converting from the native IPA schema to the sysdb sudo schema, qualify sudoUser attributes that contain user and group names. Reviewed-by: Sumit Bose <sbose@redhat.com>

Remove braces from DEBUG statements Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

IPA SUDO: Implement smart refresh Reviewed-by: Sumit Bose <sbose@redhat.com>

IPA SUDO: Remember USN Reviewed-by: Sumit Bose <sbose@redhat.com>

IPA SUDO: Implement rules refresh Reviewed-by: Sumit Bose <sbose@redhat.com>

IPA SUDO: Implement full refresh Reviewed-by: Sumit Bose <sbose@redhat.com>