[sudo-users] Sudo + sssd + active directory + netgroup (nisNetgroupTriple) different behavior in different sudo versions

[Todd C. Miller]

That sounds like this bug: https://bugzilla.sudo.ws/show_bug.cgi?id=757
It was fixed in sudo 1.8.18 but Ubuntu 16.06 ships with sudo 1.8.16.

As a workaround you can disable the fqdn option.  For example:

dn: cn=defaults,ou=SUDOers,dc=example,dc=com
objectClass: top
objectClass: sudoRole
cn: defaults
description: Default sudoOption's go here
sudoOption: !fqdn