One of my FreeIPA client hosts was taking a long time to run sudo commands and, strangely, accepted my old password and not my current password to run sudo. I decided to remove the host and re-bind it to the FreeIPA domain to try to fix this. During the process, I discovered that the problem was due to iptables firewall rules on both the client and the FreeIPA servers.