[Freeipa-users] SUDO does not always works on first try

[Jakub Hrozek]

On Fri, Oct 02, 2015 at 06:35:41AM +0000, Zoske, Fabian wrote:
> Hi folks,
> 
> we recently setup an IPA-Server on Centos 7.1 and connected some Ubuntu 14.04 LTS machines to this server.
> The IPA-Realm is just for configuring the clients, such as HBAC and SUDO. The user information are stored in an AD to which we established a two-way trust.
> 
> Our problem is now, that sudo sometimes tells us, that a user is not allowed to run SUDO on that machine. But on the second try he can execute the command which failed the first time.
> 
> Any ideas, whats wrong?

Not without logs, sorry. We need both from sudo itself and SSSD.

But the closes that comes to mind is:
    https://bugzilla.redhat.com/show_bug.cgi?id=1247539