I've gone through the Google searches, but the results always have an extra clue that I'm not seeing. The error:
[testuser@testhost] $ sudo -ll sudo: no valid sudoers sources found, quitting sudo: unable to initialize policy plugin
That's it. No parse errors in /etc/sudoers, nothing.
- /etc/sudoers is owned by root:root and has 0440 permissions.
- I ran
visudoto uncomment the included
- My test user is a member of
- I've even removed and reinstalled
sudo-1.8.6p3-7.el6.x86_64on this RHEL 6.4 test VM.
What else can I look at?
Answers to questions:
- The VM I'm testing on is secure; I can't copy/paste to an outside site. (I'm asking this question from a different host outside the firewall.)
stat /etc/sudoersshows a regular file of
access 0440. The contents of the file are default (via the remove and reinstall) with the exception of the
%wheelgroup being uncommented.
ls -ld /etc/sudo*shows
/etc/sudoers.d(0750, root:root, empty directory)
The overall goal is privileges via ldap, which I've done before successfully.
[CORRECTION: The uncommented
%wheel group is not password-free. The test user must enter a password for wheel privileges.]
[UPDATE 1011h: Modifying
/etc/sudo-ldap.conf with the correct
sudoers_base got me access to the LDAP database (anonymous bind during testing) and a successful result to
sudo -ll. That's a workaround for me, but doesn't solve the initial problem of whatever is preventing sudoers from working locally.]