This is an interesting one that I ran into today on an RHEL 6.3 VM that is using SSSD for authentication against LDAP. User contacted me stating that he was unable to su to a particual user.