diff --git a/inventory/group_vars/all.yml b/inventory/group_vars/all.yml
index bde7d20..5c56a49 100644
--- a/inventory/group_vars/all.yml
+++ b/inventory/group_vars/all.yml
@@ -1,5 +1,5 @@
 ---
-ansible_user: xadmin
+#ansible_user: xadmin
 
 packages_common:
   - 'bash'
@@ -60,6 +60,7 @@ ntp_restrict:
   - '::1'
 
 # SSSD & OpenLDAP core settings
+sssd_nss_homedir_substring: '/nfs/users'
 sssd_domain_name: "metaunix"
 openldap_host: "ldap.int.metaunix.net"
 openldap_port: 636
@@ -79,6 +80,6 @@ sssd_default_shell: "/bin/bash"
 sudoers_sudoers:
   privileges:
     - name: '%sudo'
-      entry: 'ALL=NOPASSWD:ALL'
-    - name: '%linuxadmins'
       entry: 'ALL=(ALL) ALL'
+    - name: '%linuxadmins'
+      entry: 'ALL=NOPASSWD:ALL'
diff --git a/requirements.yml b/requirements.yml
index d8c8487..37c0639 100644
--- a/requirements.yml
+++ b/requirements.yml
@@ -16,7 +16,7 @@ roles:
   - name: gballan.sssd
     src: gitea@git.metaunix.net:gballan/ansible-role-sssd.git
     scm: git
-    version: v0.1.6
+    version: v0.1.7
 
   - src: arillso.sudoers
     version: 2.3.0