[Freeipa-users] Sudo privilege inheritance in FreeIPA (3.0.x branch)

[Jakub Hrozek]

On Thu, Feb 04, 2016 at 11:39:07AM -0700, sysadmin ofdoom wrote:
> Note:     sudo rule "testSudo" fails when using user group. But succeeds
> when using a directly defined user.
>         sudo rule "sudo-1" fails when user defined directly, but hosts are
> defined with host group.
> 
> The behaviour that I'm observing is: sudo rules are not functioning any
> time the user or host are not defined directly in the sudo rule. And yes I
> have set the nisdomainname.

Please follow:
    https://fedorahosted.org/sssd/wiki/HOWTO_Troubleshoot_SUDO

Especially the sudo log would be helpful in this case I guess.