Enhancement to sudoers role to add groups and work with user sync

[jimright]

Two changes to the cloudera.exe.sudoers roles are included as part of this PR:

1. An enhancement to add a CDP group to the FreeIPA sudo rule. We can now specify an existing CDP group to add to the sudo rule in addition to individual users.
2. As part of the above testing, we found that the FreeIPA sudoers group created as part of this role was wiped when we did a User Sync in CDP. To fix this the code is changed to assign the groups and users directly to the sudo rule (rather than first creating a "native" FreeIPA group).

Have tested the different combinations of this and confirmed that sudo rule works as expected (including following the CDP User Sync).

Signed-off-by: Jim Enright jenright@cloudera.com