Sudo: Pam Account Management Error: Permission Denied
I'm Trying Connect a Linux Machine to Ad and I Made Some Changes in Some Files Below: /Etc/Krb5. Conf /Etc/Pam. D/System-Auth /Etc/Samba/Smb. Conf After These...
I'm trying connect a Linux machine to AD and I made some changes in some files below:
/etc/krb5.conf
/etc/pam.d/system-auth
/etc/samba/smb.conf
After these changes I connected the server to AD with "net ads join" command. But then users in sudoers cannot do sudo. The error is:
$sudo -i
sudo: PAM account management error: Permission denied
in /etc/ssh/sshd file, UsePAM is no. and I appanded the line "+:ALL:ALL" to /etc/security/access.conf
/var/log/secure output:
sudo: PAM (sudo-i) illegal module type: %PAM-1.0
sudo: PAM (sudo-i) no control flag supplied
sudo: PAM (sudo-i) no module name supplied
sudo: PAM (sudo-i) illegal module type: %PAM-1.0
sudo: PAM (sudo-i) no control flag supplied
sudo: PAM (sudo-i) no module name supplied
sudo: PAM (sudo-i) illegal module type: %PAM-1.0
sudo: PAM (sudo-i) no control flag supplied
sudo: PAM (sudo-i) no module name supplied
sudo: PAM (sudo-i) illegal module type: %PAM-1.0
sudo: PAM (sudo-i) no control flag supplied
sudo: PAM (sudo-i) no module name supplied
sudo: myuser : PAM account management error: Permission denied ; TTY=pts/1 ; PWD=/home/myuser ; USER=root ; COMMAND=/bin/bash
How can I give sudo permission again to my user?
1 Answer
You mentioned making changes to /etc/pam.d/system-auth (which should be a link to /etc/pam.d/system-auth-ac)... have you tried adding no_access_check after the first occurrence of account sufficient pam_vas3.so?
# cat system-auth-ac
...
account sufficient pam_vas3.so no_access_check
...
Chloe Bennett explores the intersection of pop culture, streaming entertainment, digital trends, and contemporary lifestyle. Her weekly commentary reaches thousands of culture enthusiasts.
