Sudo + pam + ldap

Question

Hello All
We are in process to migrate to use LDAP.
Right now I have an DSEE6.1 using sasl/digest-md5 as authentication mechanism.
Sudo 1.6.8p12 is installed and was working until I moved all the local users to DS.
When I try to sudo, it ask me three times a password and drop stating that the password is invalid.
But, at same time, I'm able to authenticate using ssh.
Any ideas?

Answer 1

This is still an issue.
Using the same pam.conf from Solaris 8 and 9 into a Solaris 10 does not result in the same behaviour.
I can login into the system but when using sudo i got the following message:
$ sudo su -
Password:
su: unable to set credentialsMy /etc/pam.conf looks like:
ogin   auth requisite          pam_authtok_get.so.1 debug
login   auth required           pam_dhkeys.so.1 debug
login   auth required           pam_dial_auth.so.1 debug
login   auth binding            pam_unix_auth.so.1 server_policy debug
login   auth required           pam_ldap.so.1 use_first_pass debug
rlogin  auth sufficient         pam_rhosts_auth.so.1
rlogin  auth requisite          pam_authtok_get.so.1
rlogin  auth required           pam_dhkeys.so.1
rlogin  auth binding            pam_unix_auth.so.1 server_policy
rlogin  auth required           pam_ldap.so.1 use_first_pass debug
dtlogin auth requisite          pam_authtok_get.so.1
dtlogin auth required           pam_dhkeys.so.1
dtlogin auth binding            pam_unix_auth.so.1 server_policy
dtlogin auth required           pam_ldap.so.1 use_first_pass debug
rsh     auth sufficient         pam_rhosts_auth.so.1
rsh     auth binding            pam_unix_auth.so.1 server_policy
rsh     auth required           pam_ldap.so.1 use_first_pass debug
ppp     auth requisite          pam_authtok_get.so.1
ppp     auth required           pam_dhkeys.so.1
ppp     auth binding            pam_unix_auth.so.1 server_policy
ppp     auth required           pam_dial_auth.so.1
ppp     auth required           pam_ldap.so.1 use_first_pass debug
dtsession auth requisite       pam_authtok_get.so.1
dtsession auth required        pam_dhkeys.so.1
dtsession auth binding         pam_unix_auth.so.1 server_policy
dtsession auth required        pam_ldap.so.1 debug
other   auth requisite          pam_authtok_get.so.1 debug
other   auth sufficient         pam_dhkeys.so.1 debug
other   auth binding            pam_unix_auth.so.1 server_policy debug
other   auth required           pam_ldap.so.1 use_first_pass debug
passwd  auth binding            pam_passwd_auth.so.1 debug server_policy
passwd  auth required           pam_ldap.so.1 try_first_pass debug
login   account requisite       pam_roles.so.1
login   account required        pam_projects.so.1
login   account binding         pam_unix_account.so.1 server_policy
loign   account required        pam_ldap.so.1 debug
cron    account required        pam_projects.so.1
cron    account required        pam_unix_account.so.1
dtlogin account requisite       pam_roles.so.1
dtlogin account required        pam_projects.so.1
dtlogin account binding         pam_unix_account.so.1 server_policy
dtlogin account required        pam_ldap.so.1 debug
ppp     account requisite       pam_roles.so.1
ppp     account required        pam_projects.so.1
ppp     account required        pam_unix_account.so.1 server_policy
other   account requisite       pam_roles.so.1
other   account required        pam_projects.so.1
other   account binding         pam_unix_account.so.1 server_policy
other   account required        pam_ldap.so.1 debug
ppp     session required        pam_unix_session.so.1
other   session required        pam_unix_session.so.1
other   session required        pam_mkhomedir.so.1 skel=/etc/skel umask=0022
other   password required       pam_dhkeys.so.1 debug
other   password requisite      pam_authtok_get.so.1 debug
other   password requisite      pam_authtok_check.so.1 debug
other   password sufficient     pam_authtok_store.so.1 server_policy debug
other   password required       pam_ldap.so.1 debugAny ideas?