I still suspect nscd is involved here, simply because sudo doesn't do anything fancy with passwd lookups. In this case is it doing getpwuid(getuid()). You could try configuring nscd.conf to log debug information and see if it is caching a negative response for the user in question. - todd