Is there a way I can setup sudo with a seprate password other than root and the user password and yet I need it to pull the password from the passwd file. Ok here is why they are wanting to tie the sudo password into cyberark appliance that manages the passwords. So when the user needs to run a root command they would check out a password from cyberark. cyberark changes password from in the password file. So to restate myself is there a way to set sudo up to pull its own password from the password file and not the users or root.

I have never tried but...

sudo has it's own configuration in /etc/pam.d so it is probably possible to have it look somewhere else besides wherever you user accounts now live. Perhaps you could setup duplicate accounts in nis or locally if you regular accounts are in ldap. Sounds like an administrative nightmare.

I can see that this is going to be a big headache why cant they ever give me anything simple I looked at pam.d looks like it can be done that way still not sure how guess I going to have mess with it for a little glad I have a test vm to set it up on first.

grr still not getting anywhere