Sorry, I ended up being bitten by nscd and it caching the old group information.&nbsp; It had been working.&nbsp; Thanks for your help<br clear="all">- Justin Lintz<br>
<br><br><div class="gmail_quote">On Tue, Feb 3, 2009 at 12:08 PM, Kick, Claus <span dir="ltr">&lt;<a href="mailto:claus.kick@siemens.com">claus.kick@siemens.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">




<div>
<div dir="ltr" align="left"><font color="#0000ff" face="Arial" size="2"><span>Do you have an ACL allowing access to 
ou=groups</span></font></div>
<div dir="ltr" align="left"><font color="#0000ff" face="Arial" size="2"><span>like</span></font></div>
<div dir="ltr" align="left"><font color="#0000ff" face="Arial" size="2"><span>access to dn.one=&quot;ou=groups,dc=test,dc=net&quot; by * 
read?</span></font></div>
<div dir="ltr" align="left"><font color="#0000ff" face="Arial" size="2"><span></span></font>&nbsp;</div>
<div dir="ltr" align="left"><font color="#0000ff" face="Arial" size="2"><span>Cheers,</span></font></div>
<div dir="ltr" align="left"><font color="#0000ff" face="Arial" size="2"><span>Claus</span></font></div><br>
<div dir="ltr" align="left" lang="de">
<hr>
<font face="Tahoma" size="2"><b>Von:</b> 
openldap-technical-bounces+claus.kick=<a href="http://siemens.com" target="_blank">siemens.com</a>@OpenLDAP.org 
[mailto:<a href="mailto:openldap-technical-bounces%2Bclaus.kick" target="_blank">openldap-technical-bounces+claus.kick</a>=<a href="http://siemens.com" target="_blank">siemens.com</a>@OpenLDAP.org] <b>Im 
Auftrag von </b>Justin Lintz<br><b>Gesendet:</b> Dienstag, 3. Februar 2009 
18:03<br><b>An:</b> <a href="mailto:openldap-technical@openldap.org" target="_blank">openldap-technical@openldap.org</a><br><b>Betreff:</b> multiple 
groups not showing up in &quot;groups&quot; cmd<br></font><br></div><div><div></div><div class="Wj3C7c">
<div></div>Hi,<br>I&#39;ve configured a user to be a member of another posixGroup as 
so...<br><br>dn: cn=dev2,ou=groups,dc=test,dc=net<br>cn: dev2<br>gidNumber: 
1003<br>objectClass: posixGroup<br>objectClass: top<br>memberUid: 
dave<br><br>The users info:<br>dn: cn=David 
FooBar,ou=people,dc=test,dc=net<br>givenName: David<br>sn: FooBar<br>cn: David 
FooBar<br>uid: dave<br>userPassword:: <br>uidNumber: 1009<br>gidNumber: 
1004<br>homeDirectory: /home/dave<br>loginShell: /bin/bash<br>objectClass: 
inetOrgPerson<br>objectClass: posixAccount<br>objectClass: 
shadowAccount<br>objectClass: top<br><br>If I log into a server with the users 
account, it shows him properly a member of gid 1004, but does not list his 
seconday group of dev2.<br><br>My /etc/ldap.conf file is<br><br>base 
dc=test,dc=net<br>binddn cn=Manager,dc=test,dc=net<br>bindpw <br>timelimit 
15<br>bind_timelimit 15<br>idle_timelimit 3600<br>nss_initgroups_ignoreusers 
root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman<br>pam_filter 
objectclass=posixaccount<br>pam_member_attribute memberuid<br>nss_base_passwd 
ou=People,dc=test,dc=net?one<br>nss_base_shadow 
ou=People,dc=test,dc=net?one<br>nss_base_group&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
ou=Groups,dc=test,dc=net?one<br>uri ldaps://prodldap01/ 
ldaps://prodldap02/<br>ssl on<br>tls_cacertdir 
/etc/openldap/cacerts<br>tls_checkpeer no<br>pam_password md5<br><br>I also 
tried changing the value of memberUid to the DN of the user, but that did not 
work as well.&nbsp; Any suggestions are appreciated.&nbsp; 
Thanks<br><br><br><br><br clear="all">- Justin Lintz<br></div></div></div>
</blockquote></div><br>