florianm changed expired AD password, which confused sudo asking winbind asking AD
aws-eco-002 had florianm and stevemcmaster as sudoers (now removed) - they already have sudo privileges in the sudoers file, so don't need to be sudoers
offending winbind process can be killed by florianm if system slow
OIM support calls have been open since last week, now resolved due to OIM's support.
SSH login hangs, winbind hogs CPU, sudo hangs
This blocks deployment and testing.