Azure / Azure/azure-linux-extensions

AADLoginForLinux : sudo: PAM authentication error: Conversation error

Open
#791 3 comments 3 reactions 0 assignees View on GitHub
waiting
Dominant language
Python
Stars
333
Forks
278
Avg merge
2d 9h
Merged PRs (30d)
4

Description

## Issue
Getting the following error when trying to **sudo** with the AD account:
```
$ sudo -i
sudo: PAM authentication error: Conversation error
```
Tried this on Centos 7.3/Ubuntu 18.04

## Workaround
Changing the line in **/etc/sudoers.d/aad_admins** from:
```
%aad_admins ALL=(ALL) ALL
```
to
```
%aad_admins ALL=(ALL) NOPASSWD: ALL
```
fixed the issue.

## Request to developers

Correct extension package either by updating the **aad_admins** file as per the workaround or add appropriate PAM rules.

Contributor guide

No contributing guide indexed for this repository

Research direction

Reproduce the sudo -i failure with an AD account on CentOS 7.3 or Ubuntu 18.04. Inspect the generated /etc/sudoers.d/aad_admins entry alongside the applicable PAM rules, then verify that sudo authentication works without requiring the NOPASSWD workaround.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, centos, linux, python, ubuntu
Domain
authentication, cloud, operating-systems
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.