On Thu, Jun 14, 2012 at 8:16 PM, James M Pulver <[log in to unmask]> wrote:

> I'm trying the steps outlined in this blogpost:
> http://zews.org/rhel6-active-directory
> which is actually working partially for me. I can log in (with some users
> anyway), it seems to get the home directory from LDAP and shell. It doesn't
> seem to get the groups. I have added (as listed in the example confs on
> that blog post) groups files sss
> and even tried editing to
> netgroup files sss
> with no luck - it still seems to be using our old NIS to get groups.
>
> Finally, finger seems to have cached information (we had %H/user) for home
> dir, that didn't work, changed to /home/user and then logins worked, but
> finger still shows the older entry...
>
> Any ideas?
>
Did you turn off "nscd"? That daemon is helpful for systems with high loads
to cache various data and reduce network traffic, but man, the delay to
time out altered information can be very awkward when troubleshooting new
configurations.