title: Validate AD user can login using SSSD on SuSE
body: <p>I have a requirement to validate if a given user can login to a machine. I don't know their password, but the script can elevate to root using <code>sudo</code>. All the users are AD accounts using SSSD.</p>
  
  <p>Everything I've found just validates if the user is valid or not, such as using
  <code>id -u</code>. Doing <code>sudo -lu</code> doesn't work if the user has never logged in before and only shows their <code>sudo</code> permissions. I've also tried using <code>ldapsearch</code>, but that only queries the AD server to see if they have the correct profiles, but not necessarily on that server.</p>