If you downloaded the head of the cvs tree you are running sudo 1.7 beta which uses /etc/nsswitch.conf to determine where to find sudoers info. You need a line in there like: sudoers: ldap Otherwise, sudo will only look in /etc/sudoers. Prior versions of sudo were not nsswitch-aware. - todd