Return
-
Title
Password entered for sudo command stops working after upgrading to Solaris 11.4 with Privilege Manager for Sudo 6.1 installed -
Description
After upgrading to Solaris 11.4 the password entered for a sudo command is no longer accepted.
The system log may contain the following error message:
Sep 3 10:11:03 server01 pmplugin6.1.0.0[12807]: [ID 116310 auth.info] pam_vas: pam conversation error, enable debug for more information
You may also see an error message about an unknown user after entering the password:
pmplugin6.1.0.03105.01 Unknown user: <username>
pmplugin6.1.0.0:Invalid data found in request -
Cause
The issue is caused by nscd being configured to cache both passwd and group information. -
Resolution
Fisrt try to restart nscd on the Solaris server:# svcadm restart svc:/system/name-service/cache
If the restart of nscd does not resolve the issue then ensure that both the passwd and group cache entries in nscd.conf file are showing as disabled:
enable_cache group no
enable_cache passwd no
Note that in Solaris 11.4 you cannot make the nscd changes directly in the nscd.conf file.
For the group entry you can use this command:
# /usr/sbin/svccfg -s system/name-service/cache setprop group/enable_cache = boolean: false
And for the passwd entry:
# /usr/sbin/svccfg -s system/name-service/cache setprop password/enable_cache = boolean: false
Then restart nscd:
# svcadm disable -ts name-service/cache
# svcadm enable -ts name-service/cache
# svcadm refresh system/name-service/cache -
Change Request
804591