Upgraded a Debian box, it was using sssd for most of its auth. Could password login, could su to my own user, could kinit, could do basically everything else. Couldn't use sudo.
Eventually tracked it back to pam's common-auth and used pam-auth-update to turn off the winbind stuff.
Why the hell wasn't everything else breaking? Why was it just sudo?
Grumble, time to go eat food.



