If your sudo policy is not working as expected, use these troubleshooting steps:

1. To verify the version of sudo on your host:

   # sudo -V

2. To verify that the Sudo Plugin host is joined to the policy server, run:

   # pmplugininfo

3. To see what commands the user is allowed to run:

   # sudo -l -U <username>

   This command returns output similar to:

   Matching Defaults entries for testuser on this host: 
         log_output 
   User testuser may run the following commands on this host: 
         (ALL) /opt/quest/bin/

4. On the policy server, use the pmpolicy utility for managing the Privilege Manager for Unix security policy.

   1. To verify that you have the correct version of the policy, run:

      # pmpolicy masterstatus

      Ensure that Locally modified in the output is No.

   2. To update the version of the policy, run:

      # pmpolicy sync

   3. To verify there are no syntax errors in the policy, run:

      # pmpolicy checkout -d <dir>

5. On the Sudo Plugin host, use the pmpolicyplugin utility to display the revision status of the cached security policy on this host or to request an update from the central repository.

   1. To verify that you have the correct version of the policy on the Sudo Plugin host, run:

      # pmpolicyplugin

      Use the -g option to update the local cached security policy with the latest revision on the central repository (equivalent to pmpolicy sync on a server).

Related Topics

pmplugininfo

pmpolicy

pmpolicyplugin