I have SSSD (1.8.4) working fine on Debian Wheezy system, with an LDAP backend for users and groups. However, I'm having a problem with sudo.

My sudoers configuration file has the line following line in it:

%sudo ALL=(ALL:ALL) ALL

And my LDAP (via SSSD) user is in that "sudo" group (its UID is in the /etc/group file for group sudo, and getent shows this fine).

sudo:x:27:9009

However, when I run a sudo command, I receive the following error:

chris is not in the sudoers file. This incident will be reported.

Can someone help me to understand why this might be happening?

Chris