Hello!
I am not sure from rest of your mail which version of sssd is
problematic?
sssd-1.11.5 has some known issues.
BTW: log files from sssd-1-11.7 would be the best for troubeshooting.
All of them are problematic: 1.11.5, 1.11.7, 1.12.2
I've just tried to reproduce the issue on fresh 2008r2 and samba 4.1.6
AD installations (both) to send you log files, but without success. It
seems, the issue affects only running samba4-AD installation and only
several users from domain. I've created the user with the same
membership and other parameters as one of the affected - sudo works fine
for him. So, I've dumped log files for both users, but I don't really
want to show this info in public. And it seems that there is no option
for private bug report here -
https://fedorahosted.org/sssd/newticket .
So, tell me, please, who could I sent mail with additional info to?
Thanks for your help!
---
Best regards,
Sergey Urushkin