Re: user removed from ldap group but Linux groups command still shows user as member of the group

On 24.02.2017 15:56, Michael Ströder wrote:

Bernard Fay wrote:

...

passwd: files sss ldap shadow: files sss ldap group: files sss ldap

This mix makes no sense at all. Either you use nss_sss to query sssd (which has its own cache in /var/lib/sss/db) or you use nss_ldap (direct or via nss-pam-ldapd).

You are right michael, this is not for beginners , but you can make funny things in combination sssd and nss-ldap ;-)

best regards Michael

Decide which components you really want to use and clean your config before going any further.

Ciao, Michael.