https://www.redhat.com/archives/freeipa-devel/2012-August/msg00092.html

AFAIK there is no SearchResultDone LDAP message, so it is a bit problematic.

We can measure time between ldap_result() call returns and say "done" if interval between two received results is greater than x seconds... but it is not very reliable.

There is problem with high modification rates (10/sec as mentioned on freeipa-users list), because inter-result interval can be too long for those cases.

"Wait interval" can be shortened if result with Entry Change Notification is received ... but it can lead to problem with result interleaving and so on.

Further investigation is needed.