sudo + sssd does not work for IPA hostgroups

[4tro]

As discussed on this page:
https://pagure.io/freeipa/issue/6139

Sudo + SSSD doesn't work with hostgroups.
As suggested, sudo upstream has a fix for this problem in https://www.sudo.ws/repos/sudo/rev/2eab4070dcf7

It looks similar to the issue https://bugs.launchpad.net/bugs/1688034 but is actually different.

1) root@ipa:~# lsb_release -rd
Description: Ubuntu 16.04.2 LTS
Release: 16.04

2)
root@ipa:~# apt-cache policy sudo
sudo:
  Installed: 1.8.16-0ubuntu1.3
  Candidate: 1.8.16-0ubuntu1.3
  Version table:
 *** 1.8.16-0ubuntu1.3 500
        500 http://localapt/ubuntu xenial-updates/main amd64 Packages
        100 /var/lib/dpkg/status
     1.8.16-0ubuntu1 500
        500 http://localapt/ubuntu xenial/main amd64 Packages

3) I expect to be able to grant sudo rights based on IPA hostgroups

4) "testuser is not allowed to run sudo on host.ipa.example.com. This incident will be reported."

[4tro (finke-lamein)]

It would be awesome if this could land in both 14.04 and 16.04

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.