We are running FreeIPA 4.4.  Even though sudo is listed as one of the services in the HBAC rule, it seems like only the Sudo rules are what really controls sudo.  Sudo ignores what is in the HBAC rules.

Is this expected behavior?  It doesn't really which way it really works, we are more concerned that we might be confused and screwing something up.

Thanks,
Steve