sudo entries should be managed in LDAP, like everything else. The interface should be able to modify LDAP sudoers entries. It should verify a user exists before that user is allowed to be added to a policy. Similarly for groups.
Version: unspecified
Severity: enhancement