sudoers and directory groups

background: I have ssh set up for kerberos, and acess to ssh restricted using SACLs and domain groups. This way support staff can use their accounts instead of a local account, and no one outside of the support group can use ssh at all. And now the problem., I've added the support group to the sudoers file, however sudoers says the user is not in the sudoers file (when they are logged in via ssh) what gives?