Sudo doesn't work with non-local users

[JuliusLongmind]

Describe the bug
Presumably Manjaro installer adds the following line to /etc/pam.d/sudo which then block sudo authentication in case of an AD user.
auth required pam_deny.so # ← THIS BLOCKS AD

To Reproduce
Steps to reproduce the behavior:

1. Join to AD
2. Try to use sudo
3. See error

Expected behavior
Sudo should work with AD users just like with local users

Environment:

• Desktop Environment: Sway
• Kernel Version: 7.0.10-1
• Manjaro Version: 26.0.0
• Graphics Driver: VirtIO
• Device: VM

Additional context
Manjaro Sway community edition

[yochananmarqos]

Join to AD

Does not compute. What's AD? 🤔

[JuliusLongmind]

Join to Active Directory, login with an AD user and try to use sudo...

[yochananmarqos]

Sorry, I don't know anything about Active Directory. Have you configured PAM authentication as outlined in the Arch Wiki?

How does it "block" anything? Please post any error messages you received.

[JuliusLongmind]

The pam_deny.so required was blocking AD users — it always fails, and since it's required, any subsequent success (including pam_sss in system-auth) is ignored. Commenting it out lets the system-auth chain, with pam_sss.so, process AD authentication properly.