[Date Prev][Date Next] [Chronological] [Thread] [Top]

user removed from ldap group but Linux groups command still shows user as member of the group

To: openldap-technical@openldap.org
Subject: user removed from ldap group but Linux groups command still shows user as member of the group
From: Bernard Fay <bernard.fay@gmail.com>
Date: Fri, 24 Feb 2017 08:55:58 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=iZihWLjbgGdcKaegFHwNVd/xWyGX7oKcwISPzpEg7qQ=; b=jpxyVCQp7S4iPNjQOg5q4cgnkzeeN58E9K8XB2GyFiApWXU/UT2FrxkWCSVcibZoeI YgsA1jvxPXtle9xuezlrecfI3F2cQPiuADuti7+ErlIHrzflHeR3A6Z3KBMInEvfqFB2 IfUQB7KLvGNFP7CS1QjglDdozSrxgE1R11V4oICVXhgbCh1Wef7ydW6iw6KSkx1pS9X4 BQzfAx+Km8+E9Li8B4ezk1AzG6Ivf4tk4ugjzuT15AZTg4qi4SfPXOpyQwjqF2ePdNKA gM0kb4V7kV9hh9Av1wjol5MQcxY3chN1AvE3/hEU23cw2u/rjAJqxi3QdijmligGxGd6 xO+Q==

Hi,

I removed a user from an LDAP group about a week ago. Today, this user still shows as member of the group with the Linux command groups. Also, the group (Administrators) appears twice in the output of the command id:
uid=10000(username) gid=10000(Administrators) groups=10001(users),10005(devel),10011(video),10015(ansible),10000(Administrators)

The command getent though shows the proper group assignation:
getent group | grep username | cut -d: -f1
users
devel
video
ansible

All of those groups are LDAP group.

Does someone knows why and would know how to fix this?

Thanks,

Follow-Ups:
- Re: user removed from ldap group but Linux groups command still shows user as member of the group
  - From: Dan White <dwhite@cafedemocracy.org>
- Re: user removed from ldap group but Linux groups command still shows user as member of the group
  - From: Michael Wandel <m.wandel@t-online.de>

Prev by Date: Long ldap session when ldap server failover
Next by Date: Re: user removed from ldap group but Linux groups command still shows user as member of the group
Index(es):
- Chronological
- Thread