Hi, I posted a similair issue a while ago. then sudo rules magically started working after
enabling and disabeling the "allow_all" rule.
This time, I cannot get any sudo command working, while a hbac testing is OK. I can even
see in the log of the client that "allow_all" permits the sudo-i.
Issue is on all clients. There is no poblem with ssh/login for the AD users.
```
[admin@idm1 ~]$ ipa hbactest --user user1(a)INFRA.REDACTED.SERVICES --host
host01.redacted.services --service sudo-i
--------------------
Access granted: True
--------------------
Matched rules: allow_all
Matched rules: infra-mgmt_clients_hg
< ... >
```
```
user1@INFRA.REDACTED.SERVICES@host01:~$ sudo -i
[sudo] password for user1(a)INFRA.REDACTED.SERVICES:
user1(a)INFRA.REDACTED.SERVICES is not allowed to run sudo on host01.
```
Enabling debugging:
sssd_domain.log
https://pastebin.com/mFGUEnse
sssd_sudo.log
https://pastebin.com/3d3ETTNh
Also enabled debug in /etc/sudo.conf.
In this debug data there is no mention or trace about sss or the user.
Configuration files seem OK. sssd.conf, krb5.conf, nssswithc.conf.