On 02/24/17 08:55 -0500, Bernard Fay wrote:
I removed a user from an LDAP group about a week ago. Today, this user
still shows as member of the group with the Linux command groups. Also, the
group (Administrators) appears twice in the output of the command id:
The command getent though shows the proper group assignation:
getent group | grep username | cut -d: -f1
All of those groups are LDAP group.
Is this from a long running shell? If so, start a new shell or
Otherwise, verify that it is not cached (such as with nscd), and trouble
shoot as an nss ldap problem.