So it sounds like it works when sudo prompts you for a password, but when no password is required you get the PAM failure. Is that correct? Can you try adding the following line to your sudoers file and see if that makes a difference? Defaults !pam_acct_mgmt - todd