Sudo just uses the standard getpw* routines so I don't see how it could be sudo's fault. If TLS is required to talk to the server perhaps something is getting messed up there. - todd