[Freeipa-users] Ubuntu clients and su

Hi Everyone, When I try to run "sudo su - [user]" on an Ubuntu 20 or Ubuntu 22 client, I get the error "su: Permisison denied". Upon enabling debug_level = 6 for the domain, I saw in the log the message "Access denied by HBAC rules". Well, that's odd since my user is in a group that is allowed to login to any client using any service. In fact, when I try to run the same command from a CentOS or AlmaLinux client, the su succeeds. After adding the "su" and "su-l" HBAC Services to the group of the user I'm trying to su to, the command worked on the Ubuntu clients. I'm confused as to why the clients are behaving differently. I also don't know which client is responding correctly before adding the "su" and "su-l" HBAC Services to the user group the user is a member of. Has anyone else run into this? Am I doing something incorrectly? -- Ranbir