i integrated AD windows 208 R2 with IPA server (centos 6.5)

i write a sudo policy and access for specified user and host with allow any command.

user can execute sudo in centos 7 but when user loggin on centos 6.5 can not execute sudo and get error below

user@AD is not in sudoers file.

i write email to IPA guys but they tell there is a bug in 6.5 around sudo and AD users.

i can not migrate to centOS 7.please tell me how to solve this problem.

i configure /etc/nsswitch.conf --sudoers: file sss

/etc/sss/sss.conf----service nss, pam,ssh,sudo

/etc/sysconfig/network ----- NISDOMAIN=ad.com

thanks