[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: user removed from ldap group but Linux groups command still shows user as member of the group

To: openldap-technical@openldap.org
Subject: Re: user removed from ldap group but Linux groups command still shows user as member of the group
From: Bernard Fay <bernard.fay@gmail.com>
Date: Fri, 24 Feb 2017 10:17:41 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=7srWHd5GJdwUcDV8rJS41bP4uBg0lmhO1V3ifWstc4Y=; b=askE9QKBBHb4Q8xB6KDDoCAik7Xqu5eFXI4QrCM6kBFyADMd+PKJkf0Ltw69X1D5tb dAb89K9UdwN2W84H25c0k1vfMPsG3wLWSBRf9wYoQWgwAOlS1J/QIUDJX3DWWSKDKZYm YXK99kaOCTyIQ5aMCF2kDp1IpnGNPsbuAzvoNJ289E/ZFgjl0qxIUTjZorrcpAif9Xtc /2sYZtE9VmCgQ97uENwo5vS4K5i68UDm91Aw9/nuQrE67mInklVq+ejryOih/0+2lFGT mNKvf4oPHYpVQaTAa3lBnJtSAuIxqlrAGIOetYVrUN7kjmJNhMA+nlMR1TIEmYdByK2q h39A==
In-reply-to: <13ac6c75-c120-e9a3-6f5c-bc121acc972d@t-online.de>
References: <CAH3AE4b16BtcjR+G0Yk7s-AERFfVkCvgY4FCv77i+xEy5JQLow@mail.gmail.com> <aca87856-9608-91c3-f41c-141ae648529d@t-online.de> <CAH3AE4ZMdmbHyZms5tXAi029vthz3S1q0rozD3rCmVw1_dAhMQ@mail.gmail.com> <91ac60d2-01fc-522e-65eb-890c5cab3657@pkfnet.co.za> <CAH3AE4ZpzU6WW0LTFRB5q0jFziXX=j4ZJDy6UcWA5pOxEoBR9w@mail.gmail.com> <13ac6c75-c120-e9a3-6f5c-bc121acc972d@t-online.de>

On Fri, Feb 24, 2017 at 10:06 AM, Michael Wandel <m.wandel@t-online.de> wrote:

On 24.02.2017 15:56, Bernard Fay wrote:
> Stopping nscd did not change anything. "groups username" still shows
> user as member of Administrators.
>

please can you make an ldapsearch for the object username and the output
from getent passwd username.

Thanks Michael,

getent passwd username showed me the mistake. The user has Administrators as primary group. In our setup, all users being regular or admin users, should all be in the users group. Changing this fixed my problem.

Thanks

References:
- user removed from ldap group but Linux groups command still shows user as member of the group
  - From: Bernard Fay <bernard.fay@gmail.com>
- Re: user removed from ldap group but Linux groups command still shows user as member of the group
  - From: Michael Wandel <m.wandel@t-online.de>
- Re: user removed from ldap group but Linux groups command still shows user as member of the group
  - From: Bernard Fay <bernard.fay@gmail.com>
- Re: user removed from ldap group but Linux groups command still shows user as member of the group
  - From: Mark Coetser <mark@pkfnet.co.za>
- Re: user removed from ldap group but Linux groups command still shows user as member of the group
  - From: Bernard Fay <bernard.fay@gmail.com>
- Re: user removed from ldap group but Linux groups command still shows user as member of the group
  - From: Michael Wandel <m.wandel@t-online.de>

Prev by Date: Re: user removed from ldap group but Linux groups command still shows user as member of the group
Next by Date: Re: user removed from ldap group but Linux groups command still shows user as member of the group
Index(es):
- Chronological
- Thread