After creating a sudoers GPO and update the client with "samba-gpupdate --force", "samba-gpupdate --rsop" is showing the GPO on the client, but the file with the GPO was not created. I could not find out where the problem is. Ic tested it on a Debian-client with "sudo" installed.
David, is this your sudoers_ext? See also #14665 and #14667 seemingly from the same GPO experimentation.
(In reply to Douglas Bagnall from comment #1) Yes, these are referring to my group policy work (14665 is already fixed, fyi).
Works fine here with 4.14.2 and fix for bug https://bugzilla.samba.org/show_bug.cgi?id=14665
This was fixed a while ago.