If you store accounts in external place and want to use password authentication for sudo, you must create /etc/pam.d/sudo file like: ===================================================================== # # PAM configuration for the "sudoers" service # # auth auth include system # account account include system # session session include system # password password include system =====================================================================