Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a couple of servers that fail to display newly added supplementary groups. For example, I have a user which you run id and his groups come up.

id <username>  
groupblah, groupblahblah , groupblahblahblah

They show up initially, but if you add that user to an LDAP group, for example hr_managers, on ldap it shows he's a member but on some servers, if you run id command,

id <username>
groupblah, groupblahblah , groupblahblahah   #( but no hr_managers)  show up

getent passwd ; displays the user 
getent group ; displays hr_manager

Does anybody have any ideas how to resolve this? Better yet, how does the ldap server go about getting this group information. Would the nss_group search have anything to do with it?

any help would be appreciated.

share|improve this question

migrated from serverfault.com Apr 1 '13 at 1:09

This question came from our site for system and network administrators.

You probably have nscd running on your servers. Try nscd -i passwd and nscd -i group to flush its caches.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.