Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a couple of servers that fail to display newly added supplementary groups. For example, I have a user which you run id and his groups come up.

id <username>  
groupblah, groupblahblah , groupblahblahblah

They show up initially, but if you add that user to an LDAP group, for example hr_managers, on ldap it shows he's a member but on some servers, if you run id command,

id <username>
groupblah, groupblahblah , groupblahblahah   #( but no hr_managers)  show up

getent passwd ; displays the user 
getent group ; displays hr_manager

Does anybody have any ideas how to resolve this? Better yet, how does the ldap server go about getting this group information. Would the nss_group search have anything to do with it?

any help would be appreciated.

share|improve this question

migrated from serverfault.com Apr 1 '13 at 1:09

This question came from our site for system and network administrators.

You probably have nscd running on your servers. Try nscd -i passwd and nscd -i group to flush its caches.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.