AD based users can't execute sudo when locally defined AIX groups are used (4279568)

In AIX , when using the following authentication methods 'aixauth' 'pam',  you may experience the following error message when AD users that belong to a group and that group is defined in a local /etc/sudoers file are performing sudo operations:

"command not allowed"

and the user is prompted for a password.No matter what password the user enters, the operation cannot continue.

sudo however works for locally defined users.

By default, when matching groups, sudoers will first resolve all the user's group IDs to group names and then compare those group names to any group names listed in the sudoers file.

This works well on systems where the number of groups listed in the sudoers file is larger than the number of groups a typical user belongs to. On systems where group lookups are slow, where users may belong to a large number of groups, and where the number of groups listed in the sudoers file is relatively small, it may be prohibitively expensive and running commands via sudo may take longer than normal causing 3rd party apps to timeout.