Sudo LDAP Authentication Fail with Error: "<USER> is not in the sudoers file. This incident will be reported." (Doc ID 2695639.1)

Last updated on AUGUST 13, 2020

Applies to:

Symptoms

A system with authentication in LDAP using SSS, fail to sudo with:

$ sudo su
[sudo] password for <USER>:
<USER> is not in the sudoers file. This incident will be reported.

but <USER> exist in LDAP and is in <DOMAIN>\<LINUX_ADMIN_GROUP> group.

/etc/sudoers contain the group:

%wheel ALL=(ALL) ALL
%<DOMAIN>\<LINUX_ADMIN_GROUP> ALL=(ALL) ALL

$ id <USER>
uid=<UID>(<USER>) gid=<GID>(<DOMAIN_USERS>) groups=<GID1>(<DOMAIN_USER2>),<GID2>(<LINUX_ADMIN_GROUP>),...

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.