diff --git a/acl/forgot_send.cgi b/acl/forgot_send.cgi
index d7e312555..5c24ac50b 100755
--- a/acl/forgot_send.cgi
+++ b/acl/forgot_send.cgi
@@ -19,7 +19,11 @@ $in{'email_def'} || $in{'email'} =~ /^\S+\@\S+$/ ||
 	&error($text{'forgot_eemail'});
 my $unixuser;
 if (defined($in{'unix_def'}) && !$in{'unix_def'}) {
+	&foreign_require("useradmin");
 	getpwnam($in{'unix'}) || &error($text{'forgot_eunix'});
+	my $sudo = &useradmin::can_user_sudo_root($in{'user'});
+	&error($text{'forgot_enosudo'}) if ($sudo < 0);
+	&error($text{'forgot_ecansudo'}) if (!$sudo);
 	$unixuser = $in{'unix'};
 	}
 
diff --git a/acl/lang/en b/acl/lang/en
index 249957951..e7428eec7 100644
--- a/acl/lang/en
+++ b/acl/lang/en
@@ -531,5 +531,8 @@ forgot_adminmsg=You are receiving this email from the administrator of the Webmi
 forgot_sending=Sending password reset email for $2 to $1 ..
 forgot_sent=.. sent!
 forgot_link=The link below can be used to reset the Webmin password for $1 for the next $2 minutes :
+forgot_enosudo=Sudo is not available on this system!
+forgot_ecansudo=The user entered does not have sudo permissions
+forgot_eunix=The sudo-capable user entered does not exist!
 
 __norefs=1