At work I have Ubuntu 16.04 with LDAP account. I have several NOPASSWD rules in /etc/sudoers.d/gbs configured. They are visible:

$ sudo -l
Matching Defaults entries for m.lewicki on AMDC1494.digital.local:
    env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin\:/snap/bin, timestamp_timeout=120, env_keep+=http_proxy, env_keep+=no_proxy, env_keep+=https_proxy, env_keep+=HTTP_PROXY, env_keep+=HTTPS_PROXY,

User m.lewicki may run the following commands on AMDC1494.digital.local:
    (ALL : ALL) ALL
    (ALL) NOPASSWD: /bin/mount -o bind /*/* */scratch.*
    (ALL) NOPASSWD: /bin/umount -l */scratch.*
    (ALL) NOPASSWD: /bin/umount -l -f */scratch.*
    (ALL) NOPASSWD: /bin/mkdir -p */scratch.*
    (ALL) NOPASSWD: /usr/bin/build
    (ALL) NOPASSWD: /bin/cp *.conf */scratch.*/*.conf
    (ALL) NOPASSWD: /bin/rm -f */.build.log
    (ALL) NOPASSWD: /bin/echo -n
    (ALL) NOPASSWD: /usr/sbin/chroot */scratch.*
    (ALL) NOPASSWD: /usr/bin/chroot */scratch.*
    (root) NOEXEC: NOPASSWD: /usr/bin/updatedb
    (ALL) ALL

However they are ginored. For example

$ sudo echo -n

Still asks for password. I tried adding "sudoers: files ldap" to vim /etc/nsswitch.conf and tried apt-get install sudo-ldap, but neither helped.

Local user account that is NOT managed by LDAP works fine and doesn't ask for password for specified commands.

How to make local sudoers file respected?

  • 1
    If you run sudo -l /bin/echo -n, what happens?
    – muru
    Dec 5, 2016 at 14:24
  • $ sudo -l /bin/echo -n gives /bin/echo -n and does not ask for password
    – MateuszL
    Dec 5, 2016 at 14:43

1 Answer 1


There is a known issue in the version of sudo that ships with 16.04. While this did not fix my issue, it's a good place to start. I included some other possible causes in this Unix & Linux answer. I'm actually still troubleshooting and will document any additional findings there.

  • Welcome to the site and thank you for your input. This is more of a follow on comment, not an answer. Next time please add text like this as a comment.
    – Phil UK
    Apr 21, 2017 at 5:27
  • Not new to SE just Ask Ubuntu. Comments require 50 rep.
    – claytond
    Apr 21, 2017 at 18:25

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .