freeipa

no passwd sudo rule

ipa group-add --desc="sysadmins" sysadmins
ipa sudorule-add sysadmin_sudo \
	--hostcat=all \
	--runasusercat=all \
	--runasgroupcat=all \
	--cmdcat=all
ipa sudorule-add-user sysadmin_sudo --group sysadmins
ipa sudorule-add-option sysadmin_sudo --sudooption='!authenticate'
ipa group-add-member --user=<username> sysadmins