What sudo package (and version) is installed on the machine? There have been problems in the past with the sudo-ldap package and the GNUTLS backend (which debian uses instead of OpenSSL) changing uids behind sudo's back. - todd