Return
-
Title
Sudo error on AIX server "Sudo: policy plugin failed session initialization" -
Description
The following error message is displayed when running a sudo command on an AIX server with Privilege Manager for Sudo installed:
Sudo: policy plugin failed session initialization
-
Cause
There is no sudo entry in the /etc/pam.conf file on the AIX server. -
Resolution
RESOLUTION:
Configure a sudo entry in the /etc/pam.conf file.If you have Authentication Services installed on the same server, then you can run the following command to update the pam.conf file:# /opt/quest/bin/vastool configure pam sudo
Note that Privilege Manager for Sudo only supports using PAM and so it will not work without that configured.
Even when using LAM authentication on an AIX server you must have a sudo entry in the pam.conf file.
You can check the type of authentication configured on the the AIX server by checking the auth_type entry in the following file:/etc/security/login.cfgE.g:------------------------auth_type = STD_AUTHauth_type = PAM_AUTH------------------------
Where STD_AUTH is LAM.