no passwd sudo rule
ipa group-add --desc="sysadmins" sysadmins
ipa sudorule-add sysadmin_sudo \
--hostcat=all \
--runasusercat=all \
--runasgroupcat=all \
--cmdcat=all
ipa sudorule-add-user sysadmin_sudo --group sysadmins
ipa sudorule-add-option sysadmin_sudo --sudooption='!authenticate'
ipa group-add-member --user=<username> sysadmins